Customer Area
Need help?
Try CSI
Scan Now
Secunia Advisory SA22477Internet Explorer 7 "mhtml:" Redirection Information Disclosure
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Description
A vulnerability has been discovered in Internet Explorer, which can be exploited by malicious people to disclose potentially sensitive information. The vulnerability is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. This can be exploited to access documents served from another web site. Secunia has constructed a test, which is available at: http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/ Secunia has confirmed the vulnerability on a fully patched system with Internet Explorer 7.0 and Microsoft Windows XP SP2. Other versions may also be affected. Solution Further details available in Customer Area Original Advisory MS07-034 (KB929123): http://www.microsoft.com/technet/security/bulletin/ms07-034.mspx Other references Deep Links Do you have additional information related to this advisory?Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
|
||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
Latest advisories
New advisories: 16
New vulnerabilities: 43
Updated advisories: 21
See all
New vulnerabilities: 43
Updated advisories: 21
115 views
107 views
