OSVDB ID: 25073 Title: Microsoft IE mhtml: Redirection Domain Restriction Bypass |
Info |
|
|
Dates |
||||
|
|
Description |
Internet Explorer contains a flaw that may allow a malicious user to access documents served from another web site. The issue is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. It is possible that the flaw may allow a malicious website to access properties of a site in an arbitrary external domain in the context of the victim user's browser resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Solution Unknown Exploit: Exploit Public Disclosure: Vendor Verified |
Solution |
Currently, there are no known upgrades, patches, or workarounds available to correct this issue. |
Products |
|
References |
|
Credit |
|