IE 5.5/Outlook Express security vulnerability - GetObject() expose user's files

Georgi Guninski security advisory 22, 2000 IE 5.5/Outlook Express security vulnerability - GetObject expose user's files Systems affected: IE 5.5, Outlook Express,probably Outlook - Win98/2000. Probably other versions - have not tested. Risk: High Date: 26 September 2000 Legal Notice: This Adviso...

Очередная дырка в Internet Explorer/Outlook

Вызов GetObject позволяет обратиться к любому локальному файлу. SCRIPT alert"This script reads C:TEST.TXTnYou may need to create it"; a=GetObject"c:test.txt","htmlfile"; setTimeout"alerta.body.innerText;",2000; /SCRIPT...

Microsoft Windows Media Player 7 - Embedded OCX Control

Microsoft Windows Media Player 7 - Embedded OCX Control source: https://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients suc...

Microsoft Windows Media Player 7 - Embedded OCX Control

source: https://www.securityfocus.com/bid/1714/info Due to a flaw in the method Microsoft Windows Media Player 7 handles OCX controls ActiveX containers in embedded in RTF email messages, it is possible to crash RTF-enabled email clients such as Microsoft Outlook and Outlook Express. While this...

CVE-2000-0756

Microsoft Outlook 2000 does not properly process long or malformed fields in vCard .vcf files, which allows attackers to cause a denial of service...

CVE-2000-0756

CVE-2000-0756 affects Microsoft Outlook 2000, where the application does not properly process long or malformed vCard (.vcf) fields, enabling a denial of service. The root cause is improper handling of vCard fields during parsing. The available documents do not provide exploitable details, proof-...

vCard DoS on Outlook 2000

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Vulnerability in vCard import in Outlook 2000 Released: August 30, 2000 Summary ======= Under certain conditions, excessively long or malformed fields in a vCard .vcf file can cause Microsoft Outlook 2000 to either overflow or excessively utilize syst...

word-access.txt

Georgi Guninski security advisory 17, 2000 MS Word and MS Access vulnerability - executing arbitrary programs, may be exploited by IE/Outlook Systems affected: MS Word and MS Access 2000 with or without Service Release 1a IE and Outlook may be also used, but are not needed / Windows 98 - almost...

CVE-2000-0653

Technical details (affected products, versions, root cause, or exploit specifics) are not publicly provided in the supplied documents. Monitor for updates.

CVE-2000-0653

Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability...

Заткнуты дырки в Outlook

Заткнута дырка позволявшая открывать файлы из кэша в контексте локальной машины, а так же дырка , позволявшая открывать из электронного сообщение окно эксплорера с обратным доступом к сообщениям...

Advisory CA-2000-14

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 CERT Advisory CA-2000-14 Microsoft Outlook and Outlook Express Cache Bypass Vulnerability Original release date: July 26, 2000 Source: CERT/CC A complete revision history is at the end of this file. Systems Affected Any system running Microsoft Outloo...

Security Bulletin (MS00-046)

Microsoft Security Bulletin MS00-046 - -------------------------------------- Patch Available for "Cache Bypass" Vulnerability Originally Posted: July 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Outlookr and Outlook Express. The...

Security Bulletin (MS00-045)

Microsoft Security Bulletin MS00-045 - -------------------------------------- Patch Available for "Persistent Mail-Browser Link" Vulnerability Originally Posted: July 20, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability affecting Microsoftr Outlook...

CVE-2000-0621

Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files outside of the cache, aka the "Cache Bypass" vulnerability...

CVE-2000-0653

Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser Link" vulnerability...

Security Bulletin (MS00-043)

Microsoft Security Bulletin MS00-043 - -------------------------------------- Patch Available for "Malformed E-mail Header" Vulnerability Originally posted: July 18, 2000 Summary ======= Microsoft has released a patch that eliminates a security vulnerability in Microsoftr Outlookr and Outlook...

Переполнение буфера в Outlook

Классическое переполнение буфера при длинной временной зоне при указании времени в заголовке письма, позволяет выполнение кода...

Buffer Overflow in MS Outlook Email Clients

Security Advisory: Buffer Overflow in MS Outlook & Outlook Express Email Clients Date: 18th July 2000 Author: Aaron Drew mailto:[email protected] Versions Affected: MS Outlook 97/2000 and MS Outlook Express 4/5 A bug in a shared component of Microsoft Outlook and Outlook Express mai...

outlook.advisory.txt

Security Advisory: Buffer Overflow in MS Outlook & Outlook Express Email Clients Date: 18th July 2000 Author: Aaron Drew mailto:[email protected] Versions Affected: MS Outlook 97/2000 and MS Outlook Express 4/5 A bug in a shared component of Microsoft Outlook and Outlook Express mai...