Plebo Aesdi Nael has discovered two vulnerabilities in Microsoft Windows, which can be exploited by malicious people to disclose potentially sensitive information and potentially compromise a user's system.

1) An error when handling redirections in Internet Explorer can be exploited to access documents served from another web site via the "object.documentElement.outerHTML" property.

Secunia has constructed a test, which is available at:
http://secunia.com/internet_explorer_information_disclosure_vulnerability_test/

2) An error in Windows Explorer when handling "Drag and Drop" events can be exploited to trick a user into executing a malicious HTA application via directory traversal attacks in the filename.

Successful exploitation requires some user interaction.

Solution
1) Apply patches (see MS06-042 for details).
Further details available in Customer Area

Provided and/or discovered by
Plebo Aesdi Nael

Changelog
Further details available in Customer Area

Original Advisory
MS06-045 (KB921398):
http://www.microsoft.com/technet/security/Bulletin/MS06-045.mspx

MS06-042 (KB918899):
http://www.microsoft.com/technet/security/Bulletin/MS06-042.mspx

Plebo Aesdi Nael:
http://lists.grok.org.uk/pipermail/full-disclosure/2006-June/047398.html

Deep Links
Links available in Customer Area