CVE-2006-4560

Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser's session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under t...

CVE-2006-4560

CVE-2006-4560 affects Internet Explorer 6 on Windows XP SP2. The flaw enables remote attackers to make the browser drop DNS pinning and perform a new DNS query for a domain controlled by the attacker, by hosting script on an Internet server that an intranet server can be made inaccessible to and ...