Microsoft IE browser exposes zero-day vulnerability: an old file can cause system files to be stolen

According to ZDNet on April 13, security researchers have released details and proof-of-concept code for a zero-day vulnerability in Internet Explorer (IE browser), which allows hackers to steal files from Windows systems.

　　The vulnerability can be used to attack when a user opens a .mht file. MHT stands for MHTML Web Archive, which is the default method used by Internet Explorer to save web pages.

　　This method is mainly related to IE browsers, because newer browsers no longer save web pages in MHT format, but use HTML format, but they still support processing MHT files.

　　On Windows, MHT files are automatically set to open in IE browser by default, and IE is also the default program to open MHT files. It is very easy for hackers to exploit this vulnerability. They only need to distribute MHT files through email, instant messaging, etc.

　　Security researcher John Page said the vulnerability could "allow local file disclosure" and allow an attacker to remotely spy on "locally installed program version information." He said the page could also be automated.

　　Microsoft released a notice on this issue on March 27, and in a message to researchers on April 10, it said that it was "considering fixing this in future products or services." Microsoft also said that this vulnerability should not be taken lightly, as cybercriminal groups have used MHT files for phishing and malware distribution in the past few years.