Re: IE 5.5 and 5.01 vulnerability - reading at least local and from any host text and parsed html files

[k.van.der.raad () ITSEC NL (Kevin van der Raad)]

We've tested it as well. IE 5.0 (5.00.2919.6307) on NT4.0 (4.00.1381)
was vulnerable.

"Morgon, Glenn - SWA" wrote:
> I have tested and confirmed this on IE 5.0 (5.00.2314.1003) on Win95b and on
> IE 4.0 (4.72.3612.1713) also on Win95b as both vulnerable.
>
> Glenn Morgon
>
> -----Original Message-----
> From: Georgi Guninski [mailto:joro () NAT BG]
> Sent: Friday, July 14, 2000 4:30 AM
> To: BUGTRAQ () SECURITYFOCUS COM
> Subject: IE 5.5 and 5.01 vulnerability - reading at least local and from
> any host text and parsed html files
>
> Georgi Guninski security advisory #16, 2000
>
> IE 5.5 and 5.01 vulnerability - reading at least local and from any host
> text and parsed html files
>
> Systems affected: IE 5.5, 5.01 / Win98 - probably other versions, have
> not tested
> Risk: Medium
>
> <snip>
>
> Copyright 2000 Georgi Guninski
>
> Regards,
> Georgi Guninski
> http://www.nat.bg/~joro

<HR NOSHADE>
<UL>
<LI>text/x-vcard attachment: Card for Kevin van der Raad
</UL>