CVE-2002-0694

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote attackers to...

Заткнуты очередные дsрки в IE (cached content и другие)

Вохможно найти физическое расположение кэша, что позволяет запустить CHM-файлы. Кроме того, есть другие проблемы...

IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder

Georgi Guninski security advisory 28, 2000 IE 5.x/Outlook allows executing arbitrary programs using .chm files and temporary internet files folder Systems affected: IE 5.x/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 20 October 2000 Legal Notice: This Adviso...

CVE-2000-0201: Undefined Security Weakness

The window.showHelp method in Internet Explorer 5.x does not restrict HTML help files .chm to be executed from the local host, which allows remote attackers to execute arbitrary commands via Microsoft Networking...

ie5-chm.txt

Georgi Guninski security advisory 8, 2000 IE 5.x allows executing arbitrary programs using .chm files Disclaimer: The opinions expressed in this advisory and program are my own and not of any company. The usual standard disclaimer applies, especially the fact that Georgi Guninski is not liable fo...