Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.
Link | Tags |
---|---|
http://www.securityfocus.com/bid/923 | vdb entry |