thedark Second Lieutenant
Joined: 30 Jul 2005
Posts: 1074
|
Posted: Sat Jul 30, 2005 2:46 pm Post subject: Cross-domain Validation Flaw Can Allow Web Pages to Read Loc |
|
|
A security flaw exists in the cross-domain script validation which should prohibit scripts from accessing the content of frames in another site or domain. This vulnerability may allow a remote attacker to view local files or form information entered into other sites.
Patch: http://www.microsoft.com/windows/ie/downloads/critical/q318089/default.asp |
|