A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the Frame Domain Verification vulnerability.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ie | Microsoft | 4.0 (including) | 4.0 (including) |
| Ie | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
| Internet_explorer | Microsoft | 5.5 (including) | 5.5 (including) |