Description
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.
References
- 3220 third-party-advisory
- ie-execommand-warning-bypass(18181) vdb-entry
- 11686 vdb-entry
- http://www.frsirt.com/exploits/20041119.IESP2Unpatched.php
- 13203 third-party-advisory
- 20041119 Microsoft Internet Explorer 6 SP2 Vulnerabilities / Full disclosure Vs. Security by Obscurity... mailing-list
- VU#743974 third-party-advisory