Description
Unspecified versions of Internet Explorer allow remote attackers to cause a denial of service (crash) via an IFRAME with a src tag containing a "File://" URI followed by an 8-bit character. NOTE: some third parties were unable to verify this issue.
References
- 20060608 internet explorer vulnerability based on MarjinZ & Mr.Niega discovered mailing-list
- 20060608 Internet Explorer vulnerbility mailing-list
- 20060609 RE: Internet Explorer vulnerbility mailing-list
- 1132 third-party-advisory