CVE-2002-2031

This is a vulnerability writeup describing an information disclosure flaw in Microsoft Internet Explorer where script code can determine the existence of local files via the onError event handler. The exploit leverages the 'file://' protocol to check for files on the client host.

This exploit leverages a vulnerability in Microsoft Internet Explorer where the onError event handler can determine the existence of local files via script inclusion. It attempts to include a local file (e.g., c:\autoexec.bat) and uses JavaScript event handlers to infer file existence based on error handling.