CVE-2003-1028

Name of the Vulnerable Software and Affected Versions Internet Explorer version 6 SP1

Description The issue concerns the download function, which allows remote attackers to obtain the cache directory name. This is achieved through an HTTP response with an invalid ContentType and a .htm file. As a result, security mechanisms that rely on random names could be bypassed.

Recommendations For Internet Explorer version 6 SP1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.