Included is information on how to check if your system has been patched. A reported flaw in the implementation of restrictions in cross-domain redirects that affects IE 4.01 and IE 5 has been publicized. The flaw could be exploited by a malevolent web content provider to read files at known locations on your computer. Details are available in this bulletin , and in this FAQ . A link to the patch will appear here after it is announced.
Details are here .
A set of patches have been published for both IE 4.01 and IE 5.0- apparently a code review revealed similar weaknesses in IE 4.01. The patches are linked to this page . IE 4.01 and IE 5.0 users should apply the appropriate patch promptly. A patch is available. The Internet Explorer 4 bug variously known as the Cuartango Hole or the Untrusted Scripted Paste was the subject of a patch from Microsoft in October 1998.