Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the Frame Domain Verification vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
| Internet_explorer | Microsoft | 5.5-preview (including) | 5.5-preview (including) |
References
- http://www.microsoft.com/technet/support/kb.asp?ID=251108
- http://www.microsoft.com/technet/support/kb.asp?ID=255676
- http://www.securityfocus.com/bid/1224
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033
- http://www.microsoft.com/technet/support/kb.asp?ID=251108
- http://www.microsoft.com/technet/support/kb.asp?ID=255676
- http://www.securityfocus.com/bid/1224
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2000/ms00-033