Microsoft Internet Explorer 5.01 5.5 and 6.0 allows remote attackers to view arbitrary files that contain the \{\ character via script containing the cssText property of the stylesheet object aka \Local Information Disclosure through HTML Object\ vulnerability.