CVE-2001-0332

Internet Explorer 5.5 and earlier are vulnerable to a Frame Domain Verification flaw where an attacker can read local files by abusing frame domain checks via MSScriptControl.ScriptControl and GetObject. Affected product: IE up to version 5.5 and earlier. Root cause: improper domain verification ...