Microsoft Outlook 2003 Security Policy Bypass Vulnerability

ID EDB-ID:24686
Type exploitdb
Reporter http-equiv
Modified 2004-10-18T00:00:00


Microsoft Outlook 2003 Security Policy Bypass Vulnerability. Remote exploit for windows platform


Microsoft Outlook 2003 is reported prone to a security policy bypass vulnerability.

It is reported that by including a base64 encoded image in an email and labeling that image in a sufficient manner, it is then possible to reference this base64 encoded image.

This will result in a policy bypass because the image will be automatically rendered when the email is viewed in Outlook 2003. Although this issue is reported to affect Outlook 2003, other mail transfer agents may also be affected.

<img src="cid:malware">

Content-Type: image/gif;
Content-Transfer-Encoding: base64
Content-ID: <malware>