CVE-2002-0648: The legacy <script> data-island capability for XML in Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows...

Security readout for executives and security teams

This is an old Internet Explorer issue where a malicious page could abuse XML data islands to read local XML files, and parts of other local files, from a user’s machine. Business risk is mainly for environments still running IE 5.01, 5.5, or 6.0 in legacy workflows. Likely exposure is limited to highly legacy Windows/browser environments. Modern browsers are not identified as affected in the source bundle. Any kiosk, embedded, lab, or business application dependency that still launches these IE versions should be treated as potentially exposed. Prioritize discovery over emergency response unless legacy IE is still in production. If affected systems exist, this is a confidentiality risk tied to obsolete technology and should be remediated or isolated as part of legacy-risk reduction. Mitigation focus: Identify and remove Internet Explorer 5.01, 5.5, and 6.0 use.; Review Microsoft MS02-047 for vendor remediation guidance.; Replace legacy browser-dependent workflows with supported browsers or isolated alternatives..

Prepared

Jun 30, 2026, 12:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.