# CVEs published 2002-12-11

8 CVEs were published on December 11, 2002: 0 critical, 0 high. Days are UTC.

- [CVE-2002-1262](https://cve.now/CVE-2002-1262.md): Internet Explorer 5.5 and 6.0 does not perform complete security checks on external caching, which allows remote attackers to read arbitrary (no CVSS)
- [CVE-2002-1338](https://cve.now/CVE-2002-1338.md): The Load method in the Chart component of Office Web Components (OWC) 9 and 10 generates an exception when a specified file does not exist, (no CVSS)
- [CVE-2002-1339](https://cve.now/CVE-2002-1339.md): The "XMLURL" property in the Spreadsheet component of Office Web Components (OWC) 10 follows redirections, which allows remote attackers to (no CVSS)
- [CVE-2002-1340](https://cve.now/CVE-2002-1340.md): The "ConnectionFile" property in the DataSourceControl component in Office Web Components (OWC) 10 allows remote attackers to determine the (no CVSS)
- [CVE-2002-1341](https://cve.now/CVE-2002-1341.md): Cross-site scripting (XSS) vulnerability in read\_body.php for SquirrelMail 1.2.10, 1.2.9, and earlier allows remote attackers to insert scri (no CVSS)
- [CVE-2002-1342](https://cve.now/CVE-2002-1342.md): Unknown vulnerability in smb2www 980804-16 and earlier allows remote attackers to execute arbitrary commands. (no CVSS)
- [CVE-2002-1344](https://cve.now/CVE-2002-1344.md): Directory traversal vulnerability in wget before 1.8.2-4 allows a remote FTP server to create or overwrite files as the wget user via filena (no CVSS)
- [CVE-2002-1347](https://cve.now/CVE-2002-1347.md): Multiple buffer overflows in Cyrus SASL library 2.1.9 and earlier allow remote attackers to cause a denial of service and possibly execute a (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2002-12-11
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.