Description
Internet Explorer 5.x and Microsoft Outlook allows remote attackers to read arbitrary files by redirecting the contents of an IFRAME using the DHTML Edit Control (DHTMLED).
References
- 1474 vdb-entry
- ie-dhtmled-file-read(5107) vdb-entry
- 20000714 IE 5.5 and 5.01 vulnerability - reading at least local and from any host text and parsed html files mailing-list