Description
Microsoft Internet Explorer 5.01 and 6 does not properly identify the originating domain zone when handling redirects, which allows remote attackers to read cross-domain web pages and possibly execute code via unspecified vectors involving a crafted web page, aka "Source Element Cross-Domain Vulnerability."
References
- 1016663 vdb-entry
- MS06-042 vendor-advisory
- 21396 third-party-advisory
- 27851 vdb-entry
- ADV-2006-3212 vdb-entry
- TA06-220A third-party-advisory
- VU#252764 third-party-advisory
- 19400 vdb-entry
- oval:org.mitre.oval:def:577 vdb-entry signature