Find real vulnerabilities before they ship
A function in Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files, aka a variant of the "Frame Domain Verification" vulnerability.
| Base Score | 2.6 |
|---|---|
| Vector String | AV:N/AC:H/Au:N/C:P/I:N/A:N |
| Base Severity | Unknown |
| Version | 2.0 |
| Attack Vector (AV) |
