MS.IE.Information.Disclosure

Alias/esMS.0day.18176
Last Updated DateMar 18, 2010
Release DateFeb 05, 2010
SeverityHigh
ImpactInformation Disclosure
DescriptionThis indicates an attack attempt against an information-disclosure vulnerability in Microsoft Internet Explorer.

A remote attacker may exploit this vulnerability to get potentially sensitive information from local files via a specially crafted web page.
Affected ProductsInternet Explorer 5.01 SP4
Internet Explorer 6 SP1
Internet Explorer 7
Internet Explorer 8
Recommended ActionsRefer to the vendor's web site for the suggested workaround:
http://www.microsoft.com/technet/security/advisory/980088.mspx
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2010-0255
Reference/shttp://www.securityfocus.com/bid/38056 (BugTraq)
http://www.microsoft.com/technet/security/advisory/980088.mspx
Reference: VID-18176