Description
Internet Explorer 5.5 and 6.0 allow remote attackers to read certain files via HTML that passes information from a frame in the client's domain to a frame in the web site's domain, a variant of the "Frame Domain Verification" vulnerability.
References
- M-027 third-party-advisory government-resource
- 3693 vdb-entry
- ie-frame-verification-variant2(7702) vdb-entry
- MS01-058 vendor-advisory