Description
XMLHTTP control in Microsoft XML Core Services 2.6 and later does not properly handle IE Security Zone settings, which allows remote attackers to read arbitrary files by specifying a local file as an XML Data Source.
References
- ie-xmlhttp-redirect(7712) vdb-entry
- 3699 vdb-entry
- 20011214 MSIE6 can read local files mailing-list
- MS02-008 vendor-advisory
- 3032 vdb-entry
- 20020212 Update on the MS02-005 patch, holes still remain mailing-list