Microsoft Internet Explorer 5/6 OBJECT Tag Same Origin Policy Violation Vulnerability

ID EDB-ID:21606
Type exploitdb
Reporter Thor Larholm
Modified 2002-07-10T00:00:00


MS IE 5/6 OBJECT Tag Same Origin Policy Violation Vulnerability. CVE-2002-0723 . Remote exploit for windows platform


Microsoft Internet Explorer allows script code to violate the same origin policy through usage of the HTML OBJECT tag. Malicious script code may obtain a legitimate reference to an embedded object containing a web page from the same domain. This script may then change the location of the embedded object to a sensitive page, and maintain the reference to the object. This provides full access to the DOM of the embedded page. 

<object id="data" data="empty.html" type="text/html"></object>
var ref=document.getElementById("data").object;
ref.location.href = "";