CVE-2001-0246

CVE-2001-0246 affects Internet Explorer 5.5 and earlier. The vulnerability arises from improper verification of the domain of a frame within a browser window, enabling remote web site operators to read certain files on the client by sending information from a local frame to a frame in a different...

CVE-2001-0332

Internet Explorer 5.5 and earlier are vulnerable to a Frame Domain Verification flaw where an attacker can read local files by abusing frame domain checks via MSScriptControl.ScriptControl and GetObject. Affected product: IE up to version 5.5 and earlier. Root cause: improper domain verification ...

CVE-2001-0148

CVE-2001-0148 affects the WMP ActiveX Control in Windows Media Player 7, enabling remote command execution in Internet Explorer via javascript URLs (Frame Domain Verification variant). The vulnerability is triggered through the WMP ActiveX component, allowing a remote attacker to execute commands...

CVE-2001-0092

Affected software: Internet Explorer 5.0–5.5. The issue is a Frame Domain Verification vulnerability where the frame domain is not properly verified within a browser window, allowing a remote attacker to read local client files. This is described as a new variant of the Frame Domain Verification ...

CVE-2001-0148

The WMP ActiveX Control in Windows Media Player 7 allows remote attackers to execute commands in Internet Explorer via javascript URLs, a variant of the "Frame Domain Verification" vulnerability...

CVE-2001-0092

A function in Internet Explorer 5.0 through 5.5 does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a new variant of the "Frame Domain Verification" vulnerability...

Security Bulletin (MS00-093)

Microsoft Security Bulletin MS00-093 Patch Available for "Browser Print Template" and "File Upload via Form" Vulnerabilities Originally posted: December 01, 2000 Summary Microsoft has released a patch that eliminates four security vulnerabilities in Microsoft® Internet Explorer: The “Browser Prin...

CVE-2000-0768

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability...

CVE-2000-0768

A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability...

CVE-2000-0768

The CVE-2000-0768 issue affects Internet Explorer 4.x and 5.x where a function that verifies the domain of a frame within a browser window fails to properly verify, enabling a remote attacker to read client files. Affected component: the Frame Domain Verification logic in IE. Root cause: inadequa...

CVE-2000-0465

Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability...

CVE-2000-0465

Affected software: Internet Explorer 4.x and 5.x. Vulnerability: Frame Domain Verification — IE does not properly verify the domain of a frame within a browser window. Root cause/summary: Inadequate domain verification enables a remote attacker to access client files via the frame. Impact: Confid...

Security Bulletin (MS00-033)

Microsoft Security Bulletin MS00-033 - -------------------------------------- Patch Available for "Frame Domain Verification", "Unauthorized Cookie Access", and "Malformed Component Attribute" Vulnerabilities Originally Posted: May 17, 2000 Summary ======= Microsoft has released a comprehensive...