Description
Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
Affected products
- Microsoft / ie4.0 – 4.0
- Microsoft / internet_explorer3.0 – 3.0
- Microsoft / internet_explorer3.0.2 – 3.0.2
- Microsoft / internet_explorer3.1 – 3.1
- Microsoft / internet_explorer3.2 – 3.2
- Microsoft / internet_explorer4.0 – 4.0
- Microsoft / internet_explorer4.0.1 – 4.0.1
- Microsoft / internet_explorer4.1 – 4.1
- Microsoft / internet_explorer4.5 – 4.5
- Microsoft / internet_explorer5.0 – 5.0
- Microsoft / internet_explorer5.1 – 5.1