{"edition": 1, "title": "Microsoft IE JavaScript script src Local File Enumeration", "bulletinFamily": "software", "published": "2002-01-03T00:00:00", "lastseen": "2017-04-28T13:19:57", "history": [], "modified": "2002-01-03T00:00:00", "reporter": "Tom Micklovitch()", "hash": "bf244cebe1e7a940b6f5a304fe88e77d9d1ff0276706047c9ff1f8f5b4149114", "viewCount": 0, "href": "https://vulners.com/osvdb/OSVDB:3034", "description": "## Vulnerability Description\nMicrosoft Internet Explorer allows a remote attacker to verify the existance of a file on a vulnerable machine. This information disclosure is due to the way JavaScript returns error messages when it attempts to access a file. Using the \"OnError\" even handler, calls to a local file will result in an error message that verifies it's existance.\n\n## Solution Description\nCurrently, there are no known upgrades, patches, or workarounds available to correct this issue.\n## Short Description\nMicrosoft Internet Explorer allows a remote attacker to verify the existance of a file on a vulnerable machine. This information disclosure is due to the way JavaScript returns error messages when it attempts to access a file. Using the \"OnError\" even handler, calls to a local file will result in an error message that verifies it's existance.\n\n## References:\nMail List Post: http://archives.neohapsis.com/archives/bugtraq/2002-01/0019.html\nMail List Post: http://lists.darklab.org/pipermail/darklab/2007-February/000275.html\nISS X-Force ID: 7784\nBugtraq ID: 3779\n", "affectedSoftware": [{"name": "Internet Explorer", "version": "6.0", "operator": "eq"}, {"name": "Internet Explorer", "version": "5.0", "operator": "eq"}, {"name": "Internet Explorer", "version": "5.0.1", "operator": "eq"}, {"name": "Internet Explorer", "version": "5.5", "operator": "eq"}], "type": "osvdb", "hashmap": [{"key": "affectedSoftware", "hash": "a9c5ade8851a148b7619e76c6364c506"}, {"key": "bulletinFamily", "hash": "f9fa10ba956cacf91d7878861139efb9"}, {"key": "cvelist", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "cvss", "hash": "8cd4821cb504d25572038ed182587d85"}, {"key": "description", "hash": "562b373bb6f72ad7d8089bdc49042f54"}, {"key": "href", "hash": "0d1e88656597b54e1dbc1d3bc95a4a6d"}, {"key": "modified", "hash": "ffe756023ddad1c8d495a5e8c8f926ca"}, {"key": "objectVersion", "hash": "56765472680401499c79732468ba4340"}, {"key": "published", "hash": "ffe756023ddad1c8d495a5e8c8f926ca"}, {"key": "references", "hash": "d41d8cd98f00b204e9800998ecf8427e"}, {"key": "reporter", "hash": "0a0e1cea0039bdbdd05c20f49604274b"}, {"key": "title", "hash": "109092a77294b7ced87017e43d113c79"}, {"key": "type", "hash": "1327ac71f7914948578f08c54f772b10"}], "references": [], "objectVersion": "1.2", "enchantments": {"score": {"value": -0.2, "vector": "NONE", "modified": "2017-04-28T13:19:57"}, "dependencies": {"references": [], "modified": "2017-04-28T13:19:57"}, "vulnersScore": -0.2}, "cvss": {"vector": "NONE", "score": 0.0}, "cvelist": [], "id": "OSVDB:3034"}

{}