Description
Internet Explorer 5.0, and possibly other versions, may allow remote attackers (malicious web pages) to read known text files from a client's hard drive via a SCRIPT tag with a SRC value that points to the text file.
References
- ie-local-file-disclosure(6688) vdb-entry
- 20010606 security bug Internet Explorer 5 mailing-list