HTTP redirection to ms-its (and few others) protocol exploiting directory traversal bug cause CHM file to be saved to known location. With another directory traversal bug HTML from CHM file can be executed in local zone.
CPE | Name | Operator | Version |
---|---|---|---|
internet explorer | eq | 6.0 |