Microsoft Windows XP/2000/2003 - MHTML URI Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/18198/info DEFAULT BASEURL= InternetShortcut...

Microsoft Windows XP20002003 - MHTML URI Buffer Overflow (PoC)

Microsoft Windows XP20002003 - MHTML URI Buffer Overflow PoC source: https://www.securityfocus.com/bid/18198/info DEFAULT BASEURL= InternetShortcut...

IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net

Article submission: ph4yunshu wustyunshuathotmail.com IE mhtml redirection vulnerability using the method Author: yunshuAtph4nt0m.org Team: http://www.ph4nt0m.org Data: 2006-05-11 This vulnerability is primarily an information leak, seethe specific description. In order to ensure client safety, t...

Update Protection against Microsoft Internet Explorer mhtml Redirection Vulnerability

A vulnerability has been identified in Microsoft Internet Explorer. Internet Explorer fails to properly validate "mhtml:" URL redirections. This could be exploited by a remote attackers to access sensitive information on behalf of the target user...

IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net

Article author: yunshuAtph4nt0m.org Information source: http://www.ph4nt0m.org This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the I...

Information disclosure

A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...

Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure

source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in the context of the victim user's...

Outlook Express 5.56.0 Windows Mail - MHTML URI Handler Information Disclosure

Outlook Express 5.56.0 Windows Mail - MHTML URI Handler Information Disclosure source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties o...

[SA19738] Internet Explorer "mhtml:" Redirection Disclosure of Sensitive Information

TITLE: Internet Explorer "mhtml:" Redirection Disclosure of Sensitive Information SECUNIA ADVISORY ID: SA19738 VERIFY ADVISORY: http://secunia.com/advisories/19738/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Internet Explorer 6.x...

Microsoft Internet Explorer crossite access

Script from one site can access content of the page from different site with mhtml: URI handler...

CVE-2004-0380

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help CHM file that references the InfoTech Storage ITS...

MS04-013: Cumulative Update for Outlook Express (837009)

The remote host has a version of Outlook Express that has a bug in its MHTML URL processor that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a malformed email to a user of this host using Outlook, or would need to lure him in...

CVE-2004-0380

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help CHM file that references the InfoTech Storage ITS...

CVE-2004-0380

The CVE-2004-0380 issue affects the MHTML URL Processing Vulnerability in Microsoft Outlook Express 5.5 SP2 through 6 SP1, rooted in the MHTML/ITS handling and cross-domain logic. A remote attacker could cause HTML/CHM content to execute arbitrary code in the Local Machine Zone by exploiting ITS,...

Outlook Express MHTML protocol handler does not properly validate source of alternate content

Overview The Outlook Express MIME Encapsulation of Aggregate HTML Documents MHTML protocol handler does not adequately validate the source of alternate content. An attacker could exploit this vulnerability to access data and execute script in different security domains. By causing script to be ru...

Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)

Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass MS04-013 source: https://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the...

Microsoft Internet Explorer 5.0.1 - ITS Protocol Zone Bypass (MS04-013)

source: https://www.securityfocus.com/bid/9658/info Microsoft Internet Explorer has been reported prone to a vulnerability that may permit hostile content to be interpreted in the Local Zone. The issue may be exploited via the ITS InfoTech Storage Protocol URI handler. It is possible to use this...

MHTML Redirection Leads to Downloading EXE and Executing

MHTML Redirection Leads to Downloading EXE and Executing tested OS:Win2k3,CN version IE: with MS03-048 installed. OS:WinXp, CN version Microsoft Internet Explorer v6.Sp1; up-to-date on 2003/11/16 overview A vulnerability in Internet Explorer is found: any attacker that can reach MYCOMPUTER securi...

Microsoft Outlook Express MHTML Forced File Execution Vulnerability

Description A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component failing to securely handle MHTML file URIs that reference a non-existent...

Microsoft Outlook Express 6.0 - MHTML Forced File Execution (2)

source: https://www.securityfocus.com/bid/9105/info A vulnerability has been discovered in Microsoft Outlook Express when handling MHTML file and res URIs that could lead to an unexpected file being downloaded and executed. The problem occurs due to the component failing to securely handle MHTML...