Description
Internet Explorer 5.01 SP3 through 6.0 SP1 allows remote attackers to access and execute script in the My Computer domain using the browser cache via crafted Content-Type and Content-Disposition headers, aka the "Browser Cache Script Execution in My Computer Zone" vulnerability.
References
- 9580 third-party-advisory
- CA-2003-22 third-party-advisory
- http://www.lac.co.jp/security/english/snsadv_e/67_e.html
- ie-cache-script-injection(12961) vdb-entry
- MS03-032 vendor-advisory
- VU#205148 third-party-advisory
- 8457 vdb-entry