Signature Detail
Short Name |
HTTP:STC:IE:CACHE-CREATERANGE |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
microsoft http internet explorer javascript |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Internet Explorer Cache createRange
This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. IE 5.5 and 6.0 are vulnerable; IE 5 SP2 and 6.0 SP1 are not vulnerable. IE does not confirm that multiple open browser windows are operating in the proper security zones; attackers can obtain sensitive information from the host cache.
Extended Description
Successful exploitation of the vulnerability could enable a remote attacker to read sensitive files on a victim's local machine, steal cookies, deface web pages, and execute arbitrary commands with the privileges of the user running IE.
References