Rio Sherri

The issue exists due to insufficient input validation in Microsoft browsers. An attacker could exploit this to impact the confidentiality of protected information by using a specially crafted web page. The vulnerability allows an attacker to pass custom command line parameters under specific conditions.

The issue is related to an unanchored regular expression in the software, which allows authenticated users with local filesystem access to include arbitrary files. This can lead to code execution.