Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
2000-01-07T05:00:00.000
2025-04-03T01:03:51.193
Deferred
CVSSv2: 10.0 (HIGH)
AV:N/AC:L/Au:N/C:C/I:C/A:C
10.0
10.0
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | microsoft | internet_explorer | 4.0 | Yes |
Application | microsoft | internet_explorer | 4.0.1 | Yes |
Application | microsoft | internet_explorer | 5.0 | Yes |
Application | microsoft | internet_explorer | 5.01 | Yes |
Application | microsoft | internet_explorer | 5.5 | Yes |