CVE-2002-1564

CVE-2002-1564 describes a vulnerability in Microsoft Internet Explorer versions 5.5 and 6.0, allowing remote attackers to steal sensitive cookie information. This is achieved by injecting script within a cookie, which then executes when a page loads. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, potentially leading to information disclosure. While there is no known active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.