Internet Explorer 5.01 allows remote attackers to bypass the cross frame security policy via a malicious applet that interacts with the Java JSObject to modify the DOM properties to set the IFRAME to an arbitrary Javascript URL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
References
- http://www.securityfocus.com/bid/1121
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026msg=38FC6130.D6D178FD%40nat.bg
- http://www.securityfocus.com/bid/1121
- http://www.securityfocus.com/templates/archive.pike?list=1\u0026msg=38FC6130.D6D178FD%40nat.bg