Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote malicious users to execute arbitrary script in documents that the user does not expect, possibly through web applications that use a text/plain type to prevent cross-site scripting attacks.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft internet explorer 5.5 |
||
microsoft internet explorer 5.01 |
||
microsoft internet explorer 5.0.1 |
||
microsoft internet explorer 5.0 |
||
microsoft internet explorer 6.0 |
Vulmon