Description
Internet Explorer 5.01, 5.5 and 6.0 does not properly handle the Content-Type HTML header field, which allows remote attackers to modify which application is used to process a document.
References
- 4085 vdb-entry
- ie-application-invocation(8118) vdb-entry
- 20020212 [ GFISEC04102001 ] Internet Explorer and Access allow macros to be executed automatically mailing-list
- MS02-005 vendor-advisory