The host is installed with Internet Explorer and is prone to Information Disclosure vulnerability. This NVT has been replaced by NVT secpod_ms10-035.nasl (OID:1.3.6.1.4.1.25623.1.0.902191).

Successful exploitation will allow remote attackers to gain knowledge of sensitive information. Impact Level:System/ Application

Apply the patch from below link, http://support.microsoft.com/kb/980088 Workaround: Apply workaround as in the advisory.

The issue is due to the browser failing to prevent local content from being rendered as HTML via the 'file://' protocol, which could allow attackers to access files with an already known filename and location on a vulnerable system.

Internet Explorer Version 5.x, 6.x, 7.x , 8.x

• http://support.microsoft.com/kb/980088
• http://www.microsoft.com/technet/security/advisory/980088.mspx
• http://www.vupen.com/english/advisories/2010/0291

---

Updated on 2015-03-25