CVE-2007-2225

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (929123)

Binary data 4093.prm...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (929123)

Binary data 4088.prm...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (929123)

Binary data 4092.prm...

CVE-2007-2227: Undefined Security Weakness

The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Doma...

CVE-2007-2225: Undefined Security Weakness

A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain...

MS07-034: Cumulative Security Update for Outlook Express and Windows Mail (929123)

The remote host is running a version of Microsoft Outlook Express with several security flaws that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open it. C...

Microsoft Outlook Express Content Disposition Parsing Information Disclosure Vulnerability

Description Outlook Express is prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in the context of the victim's browser. Attackers could exploit this issue to access sensitive...

Microsoft Security Bulletin MS07-034 - Critical Cumulative Security Update for Outlook Express and Windows Mail (929123)

Microsoft Security Bulletin MS07-034 - Critical Cumulative Security Update for Outlook Express and Windows Mail 929123 Published: June 12, 2007 Version: 1.1 General Information Executive Summary This critical security update resolves two privately reported and two publicly disclosed...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (929123)

Binary data 4090.prm...

Microsoft Windows Vista Windows Mail本地文件执行漏洞

Microsoft Windows Vista是一款微软开发的最新的操作系统。 Microsoft Windows Vista Windows Mail应用程序存在设计错误，远程攻击者可以利用漏洞以应用程序进程权限执行任意本地命令。 如果攻击者构建恶意WEB页，诱使用户访问，如果文件夹名以相同名字存在，Vistas Mail客户端会执行任意可执行文件。如目标系统中在C:\中存在blah文件夹，并包含blah.bat脚本，这时如果目标用户EMAIL消息中被点击的链接中URL目标也设置为C:\blah，那么脚本将会不被询问而执行。 Microsoft Windows Vista Ultima...

Code injection

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...

CVE-2007-1658

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...

CVE-2007-1658

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...

CVE-2007-1658

CVE-2007-1658 affects Windows Mail in Windows Vista. The vulnerability arises from improper handling of local/UNC navigation links (UNC/local file paths) in Windows Mail, allowing a remote attacker to execute arbitrary code when a user clicks a crafted link in an email. The underlying root cause ...

CVE-2007-1658: Undefined Security Weakness

Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a 1 local file or 2 UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using...

[Full-disclosure] Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability

Microsoft Windows Vista - Windows Mail Client Side Code Execution Vulnerability Successfully Tested on Windows Vista Ultimate Greetings fly out to Alex,wtfomg,Thierry,Andi and Blackzero Description Windows Mail is the default Mail Client of Microsoft Windows Vista. Vulnerability Remote Code...

Microsoft Windows Vista - Windows Mail Local File Execution

source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link...

Microsoft Windows Vista - Windows Mail Local File Execution

Microsoft Windows Vista - Windows Mail Local File Execution source: https://www.securityfocus.com/bid/23103/info Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker mu...

Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure

source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in the context of the victim user's...