Description
Microsoft Internet Explorer 5.01, 5.5, and 6.0 allows remote attackers to misrepresent the source of a file in the File Download dialogue box to trick users into thinking that the file type is safe to download, aka "File Origin Spoofing."
References
- MS02-047 vendor-advisory
- 5559 vdb-entry
- 5129 vdb-entry
- 20020828 Origin of downloaded files can be spoofed in MSIE mailing-list
- ie-file-origin-spoofing(9937) vdb-entry