Internet Explorer 5.01, 5.5, and 6 allows remote malicious users to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft internet explorer 5.5 |
||
microsoft ie 6 |
||
microsoft internet explorer 5.01 |
Vulmon