EIP-2026-118840
PRE-CVEMicrosoft Internet Explorer 6 - URI Handler Restriction Circumvention
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118840. PoCs published by Thor Larholm.
AI-analyzed exploit summary This writeup describes a bypass for Microsoft Windows Internet Explorer 6.0 SP1 URI handler restrictions using HTTP redirects. It explains how an attacker can use an <object> tag to trigger a redirect to a restricted URI (e.g., file:// or res://), circumventing security measures.
Description
Microsoft Internet Explorer 6 - URI Handler Restriction Circumvention
Exploits (1)
This writeup describes a bypass for Microsoft Windows Internet Explorer 6.0 SP1 URI handler restrictions using HTTP redirects. It explains how an attacker can use an <object> tag to trigger a redirect to a restricted URI (e.g., file:// or res://), circumventing security measures.