Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The execCommand method in Microsoft Internet Explorer 6.0 SP2 allows remote attackers to bypass the "File Download - Security Warning" dialog and save arbitrary files with arbitrary extensions via the SaveAs command.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Internet Explorer安全漏洞
Vulnerability Description
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。 Microsoft Internet Explorer是一款流行的WEB浏览器。Microsoft Internet Explorer没有正确处理包含部分字符的URL，远程攻击者可以利用这个漏洞绕过XP SP2的文件下载警告消息而直接下载保存文件。远程用户可以建立一个定制的HTTP 404错误消息，并传递这个消息到execCommand 'SaveAs'方法来
CVSS Information
N/A
Vulnerability Type
N/A