Security Advisory
CVE-2001-0149
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Windows Scripting Host in Internet Explorer 5.5 and earlier allows remote attackers to read arbitrary files via the GetObject Javascript function and the htmlfile ActiveX object.