Microsoft Windows "MHTML" protocol handler fails to properly interpret HTTP headers, which may cause information disclosure.
The Microsoft Windows "MHTML" protocol handler contains an information disclosure vulnerability in the way that it interprets HTTP headers. The "MHTML" protocol handler fails to properly interpret HTTP headers when returning MHTML content, which may allow Internet Explorer to bypass Internet Explorer domain restrictions.
By convincing a user to visit a specially crafted website, a remote, unauthenticated attacker may be able to access sensitive information.
Apply an update
This issue is addressed by Microsoft Security Bulletin MS07-034.
This vulnerability was reported in Microsoft Security Bulletin MS07-034. Microsoft thanks SANS ISC for their assistance.
This document was written by Katie Steiner.
|Date First Published:||2007-06-13|
|Date Last Updated:||2007-06-21 19:35 UTC|