Description
Internet Explorer 4.x and 5.x does not properly verify the domain of a frame within a browser window, which allows a remote attacker to read client files via the frame, aka the "Frame Domain Verification" vulnerability.
Exploits (1)
exploitdb
WORKING POC
VERIFIED
by Andrew Nosenko · htmlremotewindows
https://www.exploit-db.com/exploits/19939
References (4)
Scores
EPSS
0.2371
EPSS Percentile
96.0%
Details
Status
published
Products (4)
microsoft/internet_explorer
4.0
microsoft/internet_explorer
5.0
microsoft/internet_explorer
5.01
microsoft/internet_explorer
5.5 preview
Published
May 17, 2000
Tracked Since
Feb 18, 2026