Test ID:	1.3.6.1.4.1.25623.1.0.12298
Category:	Windows : Microsoft Bulletins
Title:	ADODB.Stream object from Internet Explorer (KB870669)
Summary:	An ADO stream object represents a file in memory. The stream object contains; several methods for reading and writing binary files and text files.;; When this by-design functionality is combined with known security; vulnerabilities in Microsoft Internet Explorer, an Internet Web site could; execute script from the Local Machine zone.
Description:	Summary: An ADO stream object represents a file in memory. The stream object contains several methods for reading and writing binary files and text files. When this by-design functionality is combined with known security vulnerabilities in Microsoft Internet Explorer, an Internet Web site could execute script from the Local Machine zone. Vulnerability Insight: This behavior occurs because the ADODB.Stream object permits access to the hard disk when the ADODB.Stream object is hosted in Internet Explorer. Solution: The vendor has released updates, please see the references for more information. CVSS Score: 7.6 CVSS Vector: AV:N/AC:H/Au:N/C:C/I:C/A:C
Copyright	Copyright (C) 2004 Noam Rathaus

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.