Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Internet Explorer 5.01, 5.5 and 6.0 allows remote attackers to read arbitrary files via malformed requests to the GetObject function, which bypass some of GetObject's security checks.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explorer安全漏洞
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft IE是与Windows系统捆绑在一起的流行的Web浏览器。Microsoft IEGetObject()'JScript函数存在输入验证漏洞，攻击者可能利用这个漏洞读取系统上任意已知文件名的文件。当ActiveX控件'htmlfile.'调用'GetObject()'JScript函数时，如果URL中包含以"../"开头的字串，则可能访问到
CVSS Information
N/A
Vulnerability Type
N/A