Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing .. (dot dot) sequences and a filename that ends in :: which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 5 | 5 |
| Internet_explorer | Microsoft | 5.5 | 5.5 |
| Internet_explorer | Microsoft | 5.5 | 5.5 |
| Ie | Microsoft | 6.0 | 6.0 |
| Ie | Microsoft | 6 | 6 |
| Internet_explorer | Microsoft | 5.5 | 5.5 |
| Internet_explorer | Microsoft | 6.0 | 6.0 |