Description
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."
References
- oval:org.mitre.oval:def:3196 vdb-entry signature
- ie-file-url-encode(19214) vdb-entry
- MS05-014 vendor-advisory
- TA05-039A third-party-advisory
- oval:org.mitre.oval:def:3060 vdb-entry signature
- oval:org.mitre.oval:def:1736 vdb-entry signature
- 20050209 Internet Explorer zone spoofing with encoded URLs mailing-list
- oval:org.mitre.oval:def:3586 vdb-entry signature
- oval:org.mitre.oval:def:1308 vdb-entry signature
- VU#580299 third-party-advisory