MS.IE.MHTML.Redirection.Information.Disclosure

Description

The vulnerability is caused due to an error in the handling of redirections for URLs with the "mhtml:" URI handler. This can be exploited to access documents served from another web site.

Affected Products

Patched system with Internet Explorer 7.0 and Microsoft Windows XP SP2. Other versions may also be affected.

Impact

Sensitive information disclosure.

Recommended Actions

Disable active scripting support.

References