Internet Explorer 5.x and 6.0 allows remote attackers to execute arbitrary programs via a modified directory traversal attack using a URL containing .. (dot dot) sequences and a filename that ends in :: which is treated as a .chm file even if it does not have a .chm extension. NOTE: this bug may overlap CVE-2004-0475.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Internet_explorer | Microsoft | 5 | 5 |
Internet_explorer | Microsoft | 5.5 | 5.5 |
Internet_explorer | Microsoft | 5.5 | 5.5 |
Ie | Microsoft | 6.0 | 6.0 |
Ie | Microsoft | 6 | 6 |
Internet_explorer | Microsoft | 5.5 | 5.5 |
Internet_explorer | Microsoft | 6.0 | 6.0 |