Microsoft Internet Explorer 5.01 SP4 6 6 SP1 and 7 does not properly handle unspecified \encoding strings \ which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site aka \Post Encoding Information Disclosure Vulnerability.\