Internet Explorer 6 on Windows XP SP2 allows remote malicious users to bypass the file download warning dialog and possibly trick an unknowledgeable user into executing arbitrary code via a web page with a body element containing an onclick tag, as demonstrated using the createElement function.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft ie 6.0 |
Vulmon