Microsoft Internet Explorer Drag-and-Drop code execution updated since 13.02.2006
Published:		14.02.2006
Source:		SECURITEAM
SecurityVulns ID:		5766
Type:		remote
Level:		5/10
Description:		By spoofing target window in race period it's possible to install malware in special folder. Vulnerability may be exploited for trojaning user's machine, but requires interaction.

Affected:		MICROSOFT : Internet Explorer 5.01
		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		Matthew Murphy, Microsoft Internet Explorer Drag-and-Drop Redeux (14.02.2006)
		SECURITEAM, [NT] Microsoft Internet Explorer Drag-and-Drop Redeux (13.02.2006)

Discuss:

Read or add your comments to this news (0 comments)