Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The showHelp() function in Microsoft Internet Explorer 5.01, 5.5, and 6.0 supports certain types of pluggable protocols that allow remote attackers to bypass the cross-domain security model and execute arbitrary code, aka "Improper Cross Domain Security Validation with ShowHelp functionality."
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explorer 安全漏洞
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet Explorer存在安全漏洞。MSIE的showHelp()实现存在问题，远程攻击者可以利用这个漏洞构造恶意页面，诱使用户点击，以用户权限查看系统文件或者执行任意命令。showHelp()是一种帮助模式用来显示包含帮助内容的HTML页面，showHelp()允许多中类型的'可插拔'协议。不过对于URL参数有多个安全限制：1
CVSS Information
N/A
Vulnerability Type
N/A