The shtml.exe component of Microsoft FrontPage 2000 Server Extensions 1.1 allows remote attackers to determine the physical path of the server components by requesting an invalid URL whose name includes a standard DOS device name.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Frontpage | Microsoft | * | * |