Launichng programs via OBJECT tag and scripting via cookies in Microsoft Internet Explorer

2003-02-2200:00:00

BUGTRAQ

vulners.com

It's possible to launch any installed application using OBJECT tag

CPENameOperatorVersion
internet explorereq6.0
internet explorereq5.5

CPE	Name	Operator	Version
	internet explorer	eq	6.0
	internet explorer	eq	5.5

References

vulners.com/securityvulns/securityvulns:doc:2380

vulners.com/securityvulns/securityvulns:doc:2381

vulners.com/securityvulns/securityvulns:doc:2560

vulners.com/securityvulns/securityvulns:doc:2692

vulners.com/securityvulns/securityvulns:doc:2709

vulners.com/securityvulns/securityvulns:doc:2768

vulners.com/securityvulns/securityvulns:doc:4120