MS Internet Explorer CHM files and ms-its handler code execution updated since 09.04.2004
Published:		14.04.2004
Source:		CERT
SecurityVulns ID:		3590
Type:		client
Level:		8/10
Description:		HTTP redirection to ms-its (and few others) protocol exploiting directory traversal bug cause CHM file to be saved to known location. With another directory traversal bug HTML from CHM file can be executed in local zone.

Affected:

MICROSOFT : Internet Explorer 6.0

Original document		MICROSOFT, Microsoft Security Bulletin MS04-013 (14.04.2004)
		CERT, US-CERT Technical Cyber Security Alert TA04-099A -- Vulnerability in Internet Explorer ITS Protocol Handler (09.04.2004)

Files:		Microsoft Security Bulletin MS04-013
Discuss:		Read or add your comments to this news (0 comments)