Description
The ActiveX control for invoking a scriptlet in Internet Explorer 5.0 through 5.5 renders arbitrary file types instead of HTML, which allows an attacker to read arbitrary files, aka a variant of the "Scriptlet Rendering" vulnerability.
References
- 7820 vdb-entry
- MS00-093 vendor-advisory
- ie-scriptlet-rendering-read-files(6085) vdb-entry