The download behavior of Internet Explorer 5.0 can be used to perform arbitrary operations on local files.
Internet Explorer 5.0 includes a dynamic HTML (DHTML) behavior called "download behavior." A "behavior" is a software object that specifies some behavior of a web page element, for example, the behavior of an object when the mouse is placed over the object. Some behaviors are included by default in IE 5, including the download behavior. This feature allows a web site to download files for use in a client side script.
For more information, see
Malicious web site operators can retrieve files from your system.
Upgrade to the latest version of Internet Explorer or download a patch as described in http://www.microsoft.com/technet/treeview/default.asp?url=/technet/security/bulletin/MS99-040.asp.
No information available at this time.
This document was written by Shawn V Hernan.
|Date First Published:||2001-08-15|
|Date Last Updated:||2001-08-21 20:59 UTC|