Description
Microsoft Internet Explorer 5.5 and 6.0 allows remote attackers to bypass the cross-domain security model to run malicious script or arbitrary programs via dialog boxes, aka "Improper Cross Domain Security Validation with dialog box."
References
- 6779 vdb-entry
- oval:org.mitre.oval:def:126 vdb-entry signature
- ie-dialog-zone-bypass(11258) vdb-entry
- N-038 third-party-advisory government-resource
- oval:org.mitre.oval:def:49 vdb-entry signature
- oval:org.mitre.oval:def:178 vdb-entry signature
- MS03-004 vendor-advisory