Description
A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the "Frame Domain Verification" vulnerability.
References
- ie-frame-verification-read-files(6086) vdb-entry
- 7817 vdb-entry
- MS00-093 vendor-advisory