Microsoft Internet Explorer Scriptlet Rendering Vulnerability

 
Aug 07, 2000
By design, the Scriptlet Component of Microsoft Internet Explorer (the ActiveX control that invokes scriplets) is only supposed to render HTML files. However, it will render any file type, which means a malicious website operator may gain read access to known files on a remote system by injecting valid HTML code into a file that would be run at the privilege level of the Local Computer Zone. Here's more details and directions to the Microsoft patch.

Microsoft Internet Explorer Scriptlet Rendering Vulnerability (information and patch)


Privacy | FAQ | Site Map | About | Guidelines | Contact | Advertising | What is ColdFusion?
House of Fusion | ColdFusion Jobs | Blog of Fusion | AHP Hosting