Description
Internet Explorer 6.0 allows remote attackers to execute arbitrary code by modifying the Content-Disposition and Content-Type header fields in a way that causes Internet Explorer to believe that the file is safe to open without prompting the user, aka the "File Execution Vulnerability."
References
- CA-2001-36 third-party-advisory
- 20011214 MSIE may download and run progams automatically mailing-list
- oval:org.mitre.oval:def:921 vdb-entry signature
- ie-file-download-execution(7703) vdb-entry
- 3033 vdb-entry
- M-027 third-party-advisory government-resource
- VU#443699 third-party-advisory
- 3578 vdb-entry
- 20011216 Re: MSIE may download and run progams automatically - NOT SO FAST mailing-list
- MS01-058 vendor-advisory