Microsoft Internet Explorer File Download Security Warning Bypass Vulnerability

Microsoft Internet Explorer File Download Security Warning Bypass Vulnerability

Microsoft Internet Explorer is reported prone to a file download security warning bypass vulnerability. This issue may be exploited to download a malicious file to the client system.

When a URI location is not found the user usually receives a 404 error message. It is reported that this issue allows an attacker to create a custom HTTP 404 error message and use the 'execCommand' method to save a Web page to the local system.

By enticing a user to follow a malicious link the attacker can plant malicious files on vulnerable systems in order to execute malicious code.