Vulnerability Details CVE-2002-0228
Microsoft MSN Messenger allows remote attackers to use Javascript that references an ActiveX object to obtain sensitive information such as display names and web site navigation, and possibly more when the user is connected to certain Microsoft sites (or DNS-spoofed sites).
Exploit prediction scoring system (EPSS) score
EPSS Score 0.286
EPSS Ranking 96.3%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2002-0228
-
cpe:2.3:a:microsoft:msn_messenger:2.2
-
cpe:2.3:a:microsoft:msn_messenger:3.0
-
cpe:2.3:a:microsoft:msn_messenger:4.0
-
cpe:2.3:a:microsoft:msn_messenger:4.5
-
cpe:2.3:a:microsoft:msn_messenger:4.6