Description (CNA)
Microsoft Internet Explorer 5.0.1 through 6.0 allows remote attackers to determine the existence of arbitrary files via the VBScript LoadPicture method, which returns an error code if the file does not exist.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- http://www.securityfocus.com/bid/9611
- http://lists.grok.org.uk/pipermail/full-disclosure/2004-February/016881.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15078
- http://secunia.com/advisories/10820
ADP enrichment
No English description supplied.