The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-02-15 21:00
Updated : 2021-07-23 05:18
NVD link : CVE-2001-0091
Mitre link : CVE-2001-0091
JSON object : View
CWE
Products Affected
microsoft
- internet_explorer