CVE-2004-0526

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing"...

CVE-2004-0526

Unknown versions of Internet Explorer and Outlook are affected by a phishing-related vulnerability that allows remote attackers to spoof a legitimate URL in the status bar. The issue arises from crafting A HREF tags with modified alt values pointing to the legitimate site, combined with an image ...

CVE-2004-0503

Microsoft Outlook 2003 allows remote attackers to bypass the default zone restrictions and execute script within media files via a Rich Text Format RTF message containing an OLE object for the Windows Media Player, which bypasses Media Player's setting to disallow scripting and may lead to...

CVE-2004-0502

Outlook 2003, when replying to an e-mail message, stores certain files in a predictable location for the "src" of an img tag of the original message, which allows remote attackers to bypass zone restrictions and exploit other issues that rely on predictable locations, as demonstrated using a shel...

CVE-2004-0501

Affected software : Outlook 2003. What is vulnerable : HTML e-mails containing a Vector Markup Language (VML) entity whose src points to a remote site can cause Outlook to request that remote URL, potentially revealing read status and other information. Cause : Bypass of intended access restricti...

CVE-2004-0503

Microsoft Outlook 2003 is affected by CVE-2004-0503 due to a security bypass in RTF handling: lack of validation for certain OLE objects attached to RTF messages may bypass Media Player scripting restrictions and could lead to unprompted executable installation when combined with predictable-file...

CVE-2004-0501

Outlook 2003 allows remote attackers to bypass intended access restrictions and cause Outlook to request a URL from a remote site via an HTML e-mail message containing a Vector Markup Language VML entity whose src parameter points to the remote site, which could allow remote attackers to know whe...

CVE-2004-0502

CVE-2004-0502 affects Microsoft Outlook 2003. When replying to an email, Outlook 2003 stores certain files in a predictable location used as the src of an img tag in the original message. This behavior can allow remote attackers to bypass zone restrictions and potentially exploit other issues tha...

Outlook Express HTML file writing

During reply to a message with HTML file attached this file is saved to known location...

ROCKET SCIENCE: Outllook 2003

Monday, May 17, 2004 Technical final step to 'silent delivery and installation of an executable on the target computer, no client input other than reading an email' this can be achieved with the highly touted 'secure-by-default' Outlook 2003 mail client from the craftsman known as 'Microsoft'...

Microsoft Outlook Express 6.0 - URI Obfuscation

Microsoft Outlook Express 6.0 - URI Obfuscation source: https://www.securityfocus.com/bid/10345/info Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. This issue is reported to affect version 6.0 of the affected software, other versions might also be affected. ...

Microsoft Outlook Express 6.0 - URI Obfuscation

source: https://www.securityfocus.com/bid/10345/info Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. This issue is reported to affect version 6.0 of the affected software, other versions might also be affected. An attacker could reportedly get a user to visit...

Microsoft Outlook 2003 - Mail Client E-mail Address Verification

source: https://www.securityfocus.com/bid/10323/info It has been reported that Microsoft Outlook mail client may be prone to a weakness that could allow a remote attacker to verify the validity of a recipient's e-mail address. This issue may result in a victim receiving more junk e-mail. Microsof...

Microsoft Outlook 2003 - Mail Client E-mail Address Verification

Microsoft Outlook 2003 - Mail Client E-mail Address Verification source: https://www.securityfocus.com/bid/10323/info It has been reported that Microsoft Outlook mail client may be prone to a weakness that could allow a remote attacker to verify the validity of a recipient's e-mail address. This...

OUTLOOK 2003: OuchLook

Sunday, May 09, 2004 Outlook 2003 the premier mail client from the company called 'Microsoft' certainly appears to have a lot of security features built into it. Curosry examination shows excellent thought into 'spam' containment, 'security' consideration and many other little 'things'. However...

Microsoft Outlook 2003 - Predictable File Location

source: https://www.securityfocus.com/bid/10307/info Microsoft Outlook 2003 is reported to be prone to store files that are specified in img tags, in predictable locations. This may present a security risk because many known and potential Internet Explorer vulnerabilities depend on the attacker...

Microsoft Outlook 2003 - Predictable File Location

Microsoft Outlook 2003 - Predictable File Location source: https://www.securityfocus.com/bid/10307/info Microsoft Outlook 2003 is reported to be prone to store files that are specified in img tags, in predictable locations. This may present a security risk because many known and potential Interne...

CVE-2004-0380

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help CHM file that references the InfoTech Storage ITS...

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal

Business Objects Crystal Reports 910 Web Form Viewer - Directory Traversal source: https://www.securityfocus.com/bid/10260/info Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files,...

CVE-2004-0121

Argument injection vulnerability in Microsoft Outlook 2002 does not sufficiently filter parameters of mailto: URLs when using them as arguments when calling OUTLOOK.EXE, which allows remote attackers to use script code in the Local Machine zone and execute arbitrary programs...