Description
Microsoft Internet Explorer 5.01 and 5.5 allows remote attackers to execute scripts in the Local Computer zone via a URL that references a local HTML resource file, a variant of "Cross-Site Scripting in Local HTML Resource" as identified by CAN-2002-0189.
References
- MS02-047 vendor-advisory
- ie-local-resource-xss(9938) vdb-entry
- 5561 vdb-entry