• info
• discussion
• exploit
• solution
• references

DHTML Edit ActiveX Control File Stealing and Cross Frame Access Vulnerability

Solution:
Microsoft has made available patches to fix this vulnerability at:
http://www.microsoft.com/windows/ie/security/dhtml_edit.asp

Note that Microsoft Internet Explorer 4.0 for Windows NT 4.0 is only vulnerable under the x86 platform.