CVE-2001-0154

CVE-2001-0154 affects Microsoft Internet Explorer 5.5 and earlier when rendering HTML and processing MIME parts. The vulnerability arises from a MIME handling table that can cause the browser to execute an embedded attachment if a malicious MIME type is set, without user confirmation. This can al...

CVE-2001-0154

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly...

CVE-2001-0154

HTML e-mail feature in Internet Explorer 5.5 and earlier allows attackers to execute attachments by setting an unusual MIME type for the attachment, which Internet Explorer does not process correctly...

CVE-2001-0173

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header...

Advisory CA-2001-06

-----BEGIN PGP SIGNED MESSAGE----- CERT Advisory CA-2001-06 Automatic Execution of Embedded MIME Types Original release date: April 03, 2001 Last revised: -- Source: CERT/CC A complete revision history can be found at the end of this file. Systems Affected All versions of Microsoft Internet...

Incorrect MIME Header Can Cause IE to Execute E-mail Attachment

Hi, Microsoft has released a security bulletin http://www.microsoft.com/technet/security/bulletin/ms01-020.asp entitled "Incorrect MIME Header Can Cause IE to Execute E-mail Attachment". EML files are MIME multipart files that IE 5 will parse. There is a vulnerability allowing arbitrary code...

Certain MIME types can cause Internet Explorer to execute arbitrary code when rendering HTML

Overview A vulnerability exists in Microsoft Internet Explorer that allows a malicious agent to execute arbitrary code when parsing MIME parts in a document. Any user or program that uses vulnerable versions of Internet Explorer to render HTML in a document for example, when browsing a filesystem...

Security Bulletin MS01-020

Title: Incorrect MIME Header Can Cause IE to Execute E-mail Attachment Date: 29 March 2001 Software: Microsoft Internet Explorer Impact: Run code of attacker's choice. Bulletin: MS01-020 Microsoft encourages customers to review the Security Bulletin at:...

Security Advisory: Microsoft Outlook 2000 vCard Buffer Overrun (additional information) - Revised

-- Corsaire Limited Security Advisory -- Title: Microsoft Outlook 2000 vCard Buffer Overrun additional information - Revised Date: 01.03.01 Application: Outlook 2000, Outlook Express Environment: WinNT, Win2000 Author: Martin O'Neal [email protected] Audience: General distribution -- Scop...

CVE-2001-0173

Buffer overflow in qDecoder library 5.08 and earlier, as used in CrazyWWWBoard, CrazySearch, and other CGI programs, allows remote attackers to execute arbitrary commands via a long MIME Content-Type header...

CVE-2000-1006

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability...

CVE-2000-1006

CVE-2000-1006 affects Microsoft Exchange Server 5.5 and relates to vulnerable MIME header handling when a blank charset is specified (charset=""). The issue allows a remote attacker to cause a denial-of-service condition by sending malformed MIME headers. The vulnerability is associated with Exch...

CVE-2000-1138

Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected...

CVE-2000-1186

Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header...

Sendmail mime7to8() Function Remote Overflow

The remote Sendmail server, according to its version number, may be vulnerable to a MIME buffer overflow attack which allows anyone to execute arbitrary commands as root. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid10588; scriptversion"1.18";...

CVE-2000-1138

Lotus Notes R5 client R5.0.5 and earlier does not properly warn users when an S/MIME email message has been modified, which could allow an attacker to modify the email in transit without being detected...

CVE-2000-1138

CVE-2000-1138 affects Lotus Notes R5 client (R5.0.5 and earlier). The issue is that the client does not properly warn users when an S/MIME email message has been modified, allowing an attacker to modify the email in transit without detection. The available documents clearly identify the affected ...

EUVD-2000-1171

Buffer overflow in phf CGI program allows remote attackers to execute arbitrary commands by specifying a large number of arguments and including a long MIME header...

CVE-2000-1006

Microsoft Exchange Server 5.5 does not properly handle a MIME header with a blank charset specified, which allows remote attackers to cause a denial of service via a charset="" command, aka the "Malformed MIME Header" vulnerability...

Exchange Malformed MIME Header Handling DoS

The remote Exchange server seems to be vulnerable to a flaw that lets malformed MIME headers crash it. Nessus did not actually test for these flaws - it just relied on the banner to identify them. Therefore, this warning may be a false positive - especially since the banner DOES NOT CHANGE if the...