Design/Logic Flaw

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving JavaScript exploit code that constructs a reference to...

CVE-2008-1448

Technical details for CVE-2008-1448 are not provided in the connected documents. Public details are limited to related CVEs; monitor for updates.

MS08-048: Security Update for Outlook Express and Windows Mail (951066)

The remote host is running a version of Microsoft Outlook Express which contains a flaw that might be used to cause an information disclosure. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open it. C Tenable Network Security, In...