Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_explorer | Microsoft | 4.0.1 (including) | 4.0.1 (including) |
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
| Internet_explorer | Microsoft | 5.5-preview (including) | 5.5-preview (including) |