Vulnerability Note VU#434641
Microsoft Internet Explorer may automatically execute HTA files
Microsoft Internet Explorer (IE) fails to properly handle HTA files. This vulnerability may allow a remote attacker to execute arbitrary code.
HTML Application (HTA)
If a remote attacker can persuade a user to access a specially crafted HTML page, that attacker may be able to execute arbitrary code with the privileges of the compromised user.
Apply an Update
Systems Affected (Learn More)
|Vendor||Status||Date Notified||Date Updated|
|Microsoft Corporation||Affected||-||11 Apr 2006|
CVSS Metrics (Learn More)
This vulnerability was reported by Jeffrey van der Stad.
This document was written by Jeff Gennari
- CVE IDs: CVE-2006-1388
- Date Public: 27 Mar 2006
- Date First Published: 11 Apr 2006
- Date Last Updated: 12 Apr 2006
- Severity Metric: 25.50
- Document Revision: 12
If you have feedback, comments, or additional information about this vulnerability, please send us email.