A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the Frame Domain Verification vulnerability.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
| Internet_explorer | Microsoft | 5.5 (including) | 5.5 (including) |