This application requires Javascript for optimal performance.

MS.IE.Information.Disclosure

Release Date

Feb 05, 2010

Severity

high

Impact

Information Disclosure

Description

This indicates an attack attempt against an information-disclosure vulnerability in Microsoft Internet Explorer.

A remote attacker may exploit this vulnerability to get potentially sensitive information from local files via a specially crafted web page.

Affected Products

Internet Explorer 5.01 SP4
Internet Explorer 6 SP1
Internet Explorer 7
Internet Explorer 8

Recommended Actions

Refer to the vendor's web site for the suggested workaround:
http://www.microsoft.com/technet/security/advisory/980088.mspx

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-0255

Reference/s

http://www.microsoft.com/technet/security/advisory/980088.mspx
http://www.securityfocus.com/bid/38056 (BugTraq)

Reference: VID-18176