Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft Internet Explorer LoadPicture File Enumeration Weakness

Microsoft Internet Explorer is prone to an issue that may permit a remote site to enumerate the existence of files on the client system.

This may be exploited via abuse of the VBScript LoadPicture method. Exploitation of the weakness may assist in other attacks which depend on the attacker being able to determine whether or not certain files on the system exist.







 

Privacy Statement
Copyright 2009, SecurityFocus