Internet Explorer 5.0 and 5.01 allows remote attackers to bypass the cross frame security policy and read files via the external.NavigateAndFind function.
| Software | From | Fixed in |
|---|---|---|
| microsoft / internet_explorer | 3.0 | 3.0.x |
| microsoft / internet_explorer | 3.0.2 | 3.0.2.x |
| microsoft / internet_explorer | 3.1 | 3.1.x |
| microsoft / internet_explorer | 3.2 | 3.2.x |
| microsoft / internet_explorer | 4.0 | 4.0.x |
| microsoft / internet_explorer | 4.0.1-sp2 | 4.0.1-sp2.x |
| microsoft / internet_explorer | 4.1 | 4.1.x |
| microsoft / internet_explorer | 4.5 | 4.5.x |
| microsoft / internet_explorer | 5.0 | 5.0.x |
| microsoft / internet_explorer | 5.1 | 5.1.x |
| microsoft / ie | 4.0-a_mac_os | 4.0-a_mac_os.x |