Exploitation Summary
EIP tracks 2 public exploits for CVE-2002-2031. PoCs published by Liu Die, Tom Micklovitch.
AI-analyzed exploit summary This is a vulnerability writeup describing an information disclosure flaw in Microsoft Internet Explorer where script code can determine the existence of local files via the onError event handler. The exploit leverages the 'file://' protocol to check for files on the client host.
Description
Internet Explorer 5.0, 5.0.1 and 5.5 with JavaScript execution enabled allows remote attackers to determine the existence of arbitrary files via a script tag with a src parameter that references a non-JavaScript file, then using the onError event handler to monitor the results.
Exploits (2)
This is a vulnerability writeup describing an information disclosure flaw in Microsoft Internet Explorer where script code can determine the existence of local files via the onError event handler. The exploit leverages the 'file://' protocol to check for files on the client host.
This exploit leverages a vulnerability in Microsoft Internet Explorer where the onError event handler can determine the existence of local files via script inclusion. It attempts to include a local file (e.g., c:\autoexec.bat) and uses JavaScript event handlers to infer file existence based on error handling.