Description (CNA)
The Custom HTTP Errors capability in Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to execute script in the Local Zone via an argument to shdocvw.dll that causes a "javascript:" link to be generated.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005763.html
- http://marc.info/?l=bugtraq&m=105585933614773&w=2
- http://security.greymagic.com/adv/gm014-ie/
- http://marc.info/?l=ntbugtraq&m=105585142406147&w=2
ADP enrichment
No English description supplied.