Description
Microsoft Visual FoxPro 6.0 does not register its associated files with Internet Explorer, which allows remote attackers to execute Visual FoxPro applications without warning via HTML that references specially-crafted filenames.
References
- MS02-049 vendor-advisory
- M-120 third-party-advisory government-resource
- ms-foxpro-app-execution(10035) vdb-entry
- 5633 vdb-entry