EIP-2026-118817

This exploit leverages a vulnerability in Internet Explorer 5.5 where arbitrary code can be injected into the trusted index.dat file via URL scripting commands. The PoC uses an OBJECT tag to force IE to render the non-HTML index.dat file as HTML, potentially executing malicious code.