View Definition
| Definition Id: oval:org.mitre.oval:def:948 | Version: 2 Last Modified: 2004-09-22 | ||
| Title: | IE File Download Dialog Vulnerability | ||
| Description: | Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to bypass security zone restrictions and execute arbitrary programs via a web document with a large number of duplicate file:// or other requests that point to the program and open multiple file download dialogs, which eventually cause Internet Explorer to execute the program, as demonstrated using a large number of FRAME or IFRAME tags, aka the "File Download Dialog Vulnerability." | ||
| Family: | windows | Class: | vulnerability |
| Status: | ACCEPTED | Reference(s): |
CVE-2003-0309
|
| Platform(s): | Microsoft Windows 98 Microsoft Windows ME Microsoft Windows NT Microsoft Windows 2000 |
Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
|
|||
