Microsoft Exchange Outlook Web Access HTTP Response Splitting Vulnerability

Description Microsoft Exchange Outlook Web Access OWA is prone to HTTP response splitting attacks. This issue could permit hostile script to be injected into client sessions, which could gain access to properties of the OWA server and Web pages hosted on the site. It is noted that the attacker mu...

MS04-026: Vulnerability in Exchange Server 5.5 Outlook Web Access XSS (842436)

The remote host runs Outlook Web Access. Outlook Web Access is a service for Microsoft Exchange, that provides web-based email, calendaring and contact management to end users. The remote version of Outlook Web Access is vulnerable to a cross-site scripting attack that could allow an attacker to...

CVE-2004-0526

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing"...

CVE-2004-0215

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service application crash via a malformed e-mail header...

CVE-2004-0215

Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service application crash via a malformed e-mail header...

CVE-2004-0215

CVE-2004-0215 describes a denial-of-service vulnerability in Microsoft Outlook Express 5.5 SP2 and Outlook Express 6 (including SP1 and 64‑bit/Windows Server 2003 variants) where a specially crafted or malformed e-mail header could crash the application. The issue is documented in MS04-018 (CAN-2...

Microsoft Outlook Express DoS

Invalid mail headers processing...

Microsoft Security Bulletin MS04-018

Microsoft Security Bulletin MS04-018 Cumulative Security Update for Outlook Express 823353 Issued: July 13, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Outlook Express® Impact of Vulnerability: Denial of Service Maximum Severity Rating: Moderate...

Microsoft Outlook Express fails to properly validate malformed e-mail headers

Overview A vulnerability exists in some versions of Microsoft Outlook Express that could allow a remote attacker to cause a denial of service. Description According to Microsoft Security Bulletin MS04-018, a flaw exists in the way that some versions of Microsoft's Outlook Express mail client...

Microsoft Outlook Express - Window Opener

Microsoft Outlook Express - Window Opener Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this vulnerability and we can still cause a drag and drop event. Well anyway, to the people that don't design easily exploited software, simply click the link on the...

MSOE Javascript Execution Vulnerability

Note: This vulnerability as well as several more can be found at http://www.greyhats.cjb.net Outlook Express Window Opener Script Execution Vulnerability Tested Microsoft Outlook Express version 6.0.2800.1123. Microsoft Windows XP sp2 Discussion Microsoft Outlook Express is prone to a vulnerabili...

Microsoft Outlook Express Malformed Email Header Denial Of Service Vulnerability

Description Microsoft Outlook Express is prone to a security vulnerability when processing emails with malformed header data. A remote attacker may potentially exploit this issue to cause a persistent denial of service in the email client. This issue is only reported to affect Outlook Express 6.0...

Microsoft Outlook Express - Window Opener

Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this vulnerability and we can still cause a drag and drop event. Well anyway, to the people that don't design easily exploited software, simply click the link on the popup that points to 'The Better Browser'...

MS04-018: Cumulative Security Update for Outlook Express (823353)

The remote host is missing a cumulative security update for Outlook Express that fixes a denial of service vulnerability in the Outlook Express mail client. To exploit this vulnerability, an attacker would need to send a malformed message to a victim on the remote host. The message will crash the...

Microsoft Outlook Express - JavaScript Execution

Microsoft Outlook Express - JavaScript Execution From: To: Subject:MSOE Scripting Example Content-Type:text/html click here to test milw0rm.com 2004-07-13...

MS Outlook Express Window Opener Vulnerability

Exploit for unknown platform in category remote exploits ============================================== MS Outlook Express Window Opener Vulnerability ============================================== Example: Alright microsoft. Get your act together. Seriously, this is the 3rd version of this...

MS Outlook Express Javascript Execution Vulnerability

Exploit for unknown platform in category remote exploits ===================================================== MS Outlook Express Javascript Execution Vulnerability ===================================================== From: To: Subject:MSOE Scripting Example Content-Type:text/html click here to...

Microsoft Outlook Express - JavaScript Execution

From: To: Subject:MSOE Scripting Example Content-Type:text/html click here to test milw0rm.com 2004-07-13...

CVE-2004-0204

CVE-2004-0204 describes a directory traversal in Crystal Reports and Crystal Enterprise Web viewers redistributed with Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Microsoft Business Solutions CRM 1.2. The vulnerability arises from improper validation of HTTP...

Microsoft Security Bulletin MS04-017 Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service (842689)

Microsoft Security Bulletin MS04-017 Vulnerability in Crystal Reports Web Viewer Could Allow Information Disclosure and Denial of Service 842689 Issued: June 8, 2004 Version: 1.0 Summary Who should read this document: Customers who use Microsoft® Visual Studio .NET 2003, who use Microsoft Office...