EIP-2026-119543
PRE-CVEMicrosoft Word 2007 (x86) - Information Disclosure
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-119543. PoCs published by Eduardo Braun Prado.
AI-analyzed exploit summary This exploit leverages the Microsoft Scriptlet Component ActiveX in MS Office Word to execute JavaScript, which then reads and discloses the contents of local files (e.g., WindowsUpdate.log) via an XMLHTTP request. It bypasses some IE security features by referencing the document itself as an HTML file.
Description
Microsoft Word 2007 (x86) - Information Disclosure
Exploits (1)
This exploit leverages the Microsoft Scriptlet Component ActiveX in MS Office Word to execute JavaScript, which then reads and discloses the contents of local files (e.g., WindowsUpdate.log) via an XMLHTTP request. It bypasses some IE security features by referencing the document itself as an HTML file.