Jelmer has discovered a vulnerability in Internet Explorer, allowing malicious sites to detect the presence of local files.

The problem is that a vbscript can cause Internet Explorer to report different error messages depending on whether a file specified in a form exists or not. This could be exploited to determine the presence of specific programs or data.

This is a variant of older vulnerabilities reported to affect previous versions of Internet Explorer.

The vulnerability has been confirmed in version 6.0 SP1 with all patches applied.

Solution
Disable Active Scripting except for trusted sites.
Further details available in Customer Area

Provided and/or discovered by
Jelmer

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area