Internet explorer HTML embedded .exe file code execution updated since 26.02.2003
Published:		10.11.2003
Source:		BUGTRAQ
SecurityVulns ID:		2621
Type:		client
Level:		8/10
Description:		By combining Content-Location: file:///xxx.exe with codebase property of <object> tag it's possible to execute .exe file embedded into HTML.

Affected:		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Internet Explorer 6.0

Original document		http-equiv@excite.com, POS#1 Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part III (10.11.2003)
		http-equiv_(at)_excite.com, Self-Executing HTML: Internet Explorer 5.5 and 6.0 Part II (26.02.2003)

Discuss:

Read or add your comments to this news (0 comments)