CVE-2004-0380

The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 contains a cross-domain scripting vulnerability. It fails to adequately validate the source of alternate content in MHTML URLs, allowing an attacker to bypass domain restrictions. By referencing a non-ex...