3 matches found
CVE-2003-0816: Undefined Security Weakness
Internet Explorer 6 SP1 and earlier allows remote attackers to bypass zone restrictions by 1 using the NavigateAndFind method to load a file: URL containing Javascript, as demonstrated by NAFfileJPU, 2 using the window.open method to load a file: URL containing Javascript, as demonstrated using...
IE5.5 window.externalNavigateAndFind security vulnerability....
Multiple security vulnerabilities found in window.external.NavigateAndFind function in IE5.5... After the most recent patches applied the vulnerabilities seem to persist.. Actually there is no current issues discussed at microsft website... Microsoft has been notified about the problem via email...
CVE-2000-0028
The vulnerability affects Internet Explorer versions 5.0 through 5.01. It allows remote attackers to bypass the cross-frame security policy and read local files via the external.NavigateAndFind function. The root cause is the ability to bypass cross-frame restrictions through NavigateAndFind, ena...