OSVDB ID: 30815 Title: Microsoft IE TIF Folder Drag and Drop Operation Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Internet Explorer contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when user accesses a malicious web page and performs unspecified drag and drop operations, which will disclose the path and content to the cached content located in the user's temporary internet folder information resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation Impact: Loss of Confidentiality Solution: Patch / RCS Exploit: Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Microsoft has released a patch to address this issue. Additionally, it is possible to correct the flaw by implementing the following workaround(s): Disable "Drag and Drop or copy and paste files" in Internet Explorer |
Products |
|
References |
|
Credit |
|