5528 matches found
Microsoft Outlook 9798200045 - Address Book Spoofing
Microsoft Outlook 9798200045 - Address Book Spoofing source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that...
Microsoft Outlook 97/98/2000/4/5 - Address Book Spoofing
source: https://www.securityfocus.com/bid/2823/info Outlook Express is the standard e-mail client that is shipped with Microsoft Windows 9x/ME/NT. The address book in Outlook Express is normally configured to make entries for all addresses that are replied to by the user of the mail client. An...
SECURITY.NNOV: Outlook Express address book vulnerability
Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Author : 3APA3A [email protected] Affected : Outlook Exress 5.5SP1 and prior Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes...
iexslt.txt
[email protected] Georgi Guninski security advisory 43, 2001 XML scripting in IE, Outlook Express Systems affected: Internet Explorer 5.x - including full patched up to now though Microsoft cannot reproduce the problem on fully patched IE 5.x ,Outlook Express probably Outlook have not tested...
CVE-2001-1325
Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML stylesheets XSL that are referenced using an IFRAME tag, possibly due to a vulnerability in Windows Scripting Host WSH...
Microsoft Internet Explorer 5.0/5.5 / OE 5.5 - XML Stylesheets Active Scripting
source: https://www.securityfocus.com/bid/2633/info A vulnerability exists in the handling of XML stylesheets in Internet Explorer and Outlook Express. If active scripting is disabled in all security zones, IE and OE will still allow script to run if it is contained in the stylesheet of an XML...
Microsoft Internet Explorer 5.05.5 OE 5.5 - XML Stylesheets Active Scripting
Microsoft Internet Explorer 5.05.5 OE 5.5 - XML Stylesheets Active Scripting source: https://www.securityfocus.com/bid/2633/info A vulnerability exists in the handling of XML stylesheets in Internet Explorer and Outlook Express. If active scripting is disabled in all security zones, IE and OE wil...
Microsoft Outlook Express address book vulnerability
Issue : Outlook Express address book allows messages to be intercepted by 3rd party Date Released : 16 March 2001 Vendor Notified : 16 March 2001 Affected : Outlook Exress 5.5SP1 and prior Risk : Low/Average Discovered : 18 December 2000 by 3APA3A Remotely Exploitable : Yes Vendor URL :...
A subject line buffer overflow in Outlook Express (was Re: EML Content Spoofing and Informed Consent)
----- Original Message ----- From: "Dan Kaminsky" [email protected] To: [email protected] Sent: Wednesday, April 04, 2001 5:52 PM Subject: EML Content Spoofing and Informed Consent was: Re: MS patch Q292108 opens a vulnerability snip The short version of this: If I try to open a MP3 file...
CVE-2001-0145
Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field...
CVE-2001-0145
CVE-2001-0145 affects Outlook 2000/98 and Outlook Express 5.x, where a buffer overflow in the VCard handler can be triggered by a malformed vCard birthday field, allowing an attacker to execute arbitrary commands. The root cause described is a faulty VCard birthday parsing leading to memory corru...
Security Bulletin MS01-012
---------------------------------------------------------------------- Title: Outlook, Outlook Express Vcard Handler Contains Unchecked Buffer Date: 22 February 2001 Software: Outlook, Outlook Express Impact: Run code of attacker's choice Bulletin: MS01-012 Microsoft encourages customers to...
CVE-2000-0764
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet...
CVE-2000-0764
CVE-2000-0764 affects Intel Express 500 series switches. The vulnerability allows a remote attacker to cause a denial of service by sending a malformed IP packet, impacting availability (partial). No exploit vector or remediation details are provided in the supplied documents beyond the basic des...
CVE-2000-1238
BEA Systems WebLogic Express and WebLogic Server 5.1 SP1-SP6 allows remote attackers to bypass access controls for restricted JSP or servlet pages via a URL with multiple / forward slash characters before the restricted pages...
CVE-2000-0882
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed ICMP packet, which causes the CPU to crash...
CVE-2000-0764
Intel Express 500 series switches allow a remote attacker to cause a denial of service via a malformed IP packet...
IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs
Georgi Guninski security advisory 24, 2000 IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs Systems affected: IE 5.5/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 18 October 2000 Legal Notice: This Advisory is Copyright c 20...
guninski24.txt
Georgi Guninski security advisory 24, 2000 IE 5.5/Outlook java security vulnerability - reading arbitrary local files and URLs Systems affected: IE 5.5/Outlook/Outlook Express - probably other versions, have not tested Risk: High Date: 18 October 2000 Legal Notice: This Advisory is Copyright c 20...