Description
The zone determination function in Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to run scripts in the Local Computer zone by embedding the script in a cookie, aka the "Cookie-based Script Execution" vulnerability.
References
- MS02-015 vendor-advisory
- ie-cookie-local-zone(8701) vdb-entry
- 3029 vdb-entry
- oval:org.mitre.oval:def:96 vdb-entry signature
- 4392 vdb-entry
- 20020330 IE: Remote webpage can script in local zone mailing-list