Microsoft Internet Explorer URI Decoding Vulnerability

Microsoft Internet Explorer URI Decoding Vulnerability

Microsoft Internet Explorer is prone to a vulnerability related to URI decoding.

A bug in how the browser parses encoded URI data may allow zone bypass. As a result, it is possible to force the browser to interpret Web content in the Local Zone. This could be exploited to execute arbitrary code in the context of the user who is currently logged in.

Cross-site scripting attacks are also possible due to this issue, as well as partial address bar obfuscation.

This vulnerability is similar to the zone bypass attack described in BID 10517.