Microsoft Internet Explorer 'Image Source Redirect' Vulnerability patch The vulnerability could allow amalicious web site operator to read - butnot add, change or delete - certain types offiles on the computer of a visiting user.When a web server navigates a window fromon
Download

Microsoft Internet Explorer 'Image Source Redirect' Vulnerability patch Ranking & Summary

Microsoft Internet Explorer 'Image Source Redirect' Vulnerability patch Tags

web add change read only view web site change Web Vulnerability Scanner Web Vulnerability test web server vulnerability add web

Microsoft Internet Explorer 'Image Source Redirect' Vulnerability patch Description

The vulnerability could allow amalicious web site operator to read - butnot add, change or delete - certain types offiles on the computer of a visiting user.When a web server navigates a window fromone domain into another one, the IE securitymodel checks the server's permissions onthe new page. However, it is possible for aweb server to open a browser window to aclient-local file, then navigate the windowto a page that is in the web site's domainin such a way that the data in the client-local fileis accessible to the new window. The datawould only be accessible to the new windowfor a very brief period, but the result is that itcould be possible for a malicious web siteoperator to view files on the computer ofa visiting user. The web site operator would need toknow (or guess) the name and location of thefile, and could only view file types thatcan be opened in a browser window.

Microsoft Internet Explorer 'Image Source Redirect' Vulnerability patch Related Software