320 matches found
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
Author: yunshuAtph4nt0m.org Team: http://www.ph4nt0m.org Data: 2006-05-11 This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the IE...
Microsoft Windows fails to properly parse the MHTML protocol
Overview Microsoft Windows fails to properly handle MHTML. This vulnerability may allow a remote attacker to execute arbitrary code on a vulnerable system. Description MHTML According to Microsoft Security Bulletin MS06-043: MHTML extends HTML to embed encoded objects, such as images, in the HTML...
inetconnCrash.txt
DEFAULT BASEURL= InternetShortcut...
Buffer overflow
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service application crash via a long mhtml URI in the URL value in a URL file...
CVE-2006-2766
Buffer overflow in INETCOMM.DLL, as used in Microsoft Internet Explorer 6.0 through 6.0 SP2, Windows Explorer, Outlook Express 6, and possibly other programs, allows remote user-assisted attackers to cause a denial of service application crash via a long mhtml URI in the URL value in a URL file...
CVE-2006-2766
CVE-2006-2766 describes a Buffer Overflow in MHTML parsing within Windows components that impacts Microsoft Internet Explorer 6 (up to SP2), Windows Explorer, and Outlook Express 6. The vulnerability is triggered by processing a long MHTML URI value in a URL file, allowing remote user-assisted at...
Microsoft Windows XP20002003 - MHTML URI Buffer Overflow (PoC)
Microsoft Windows XP20002003 - MHTML URI Buffer Overflow PoC source: https://www.securityfocus.com/bid/18198/info DEFAULT BASEURL= InternetShortcut...
Microsoft Windows MHTML URI Buffer Overflow Vulnerability
Description Microsoft Windows is prone to a remote buffer-overflow vulnerability in 'INETCOMM.DLL'. The library fails to properly bounds-check user-supplied input data before copying it into an insufficiently sized memory buffer. Remote attackers may exploit this issue to execute arbitrary machin...
Microsoft Windows XP/2000/2003 - MHTML URI Buffer Overflow (PoC)
source: https://www.securityfocus.com/bid/18198/info DEFAULT BASEURL= InternetShortcut...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
Article submission: ph4yunshu wustyunshuathotmail.com IE mhtml redirection vulnerability using the method Author: yunshuAtph4nt0m.org Team: http://www.ph4nt0m.org Data: 2006-05-11 This vulnerability is primarily an information leak, seethe specific description. In order to ensure client safety, t...
Update Protection against Microsoft Internet Explorer mhtml Redirection Vulnerability
A vulnerability has been identified in Microsoft Internet Explorer. Internet Explorer fails to properly validate "mhtml:" URL redirections. This could be exploited by a remote attackers to access sensitive information on behalf of the target user...
IE mhtml redirection vulnerability using the method-vulnerability warning-the black bar safety net
Article author: yunshuAtph4nt0m.org Information source: http://www.ph4nt0m.org This vulnerability is primarily an information leak, see http://secunia. com/advisories/1 9 7 3 8/specific description. In order to ensure client safety, the xmlhttp is not cross-domain access to information. But the I...
Information disclosure
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...
CVE-2006-2111: Exposure of Sensitive Information to an Unauthorized Actor
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...
Outlook Express 5.56.0 Windows Mail - MHTML URI Handler Information Disclosure
Outlook Express 5.56.0 Windows Mail - MHTML URI Handler Information Disclosure source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties o...
[SA19738] Internet Explorer "mhtml:" Redirection Disclosure of Sensitive Information
TITLE: Internet Explorer "mhtml:" Redirection Disclosure of Sensitive Information SECUNIA ADVISORY ID: SA19738 VERIFY ADVISORY: http://secunia.com/advisories/19738/ CRITICAL: Less critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: Microsoft Internet Explorer 6.x...
Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure
source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in the context of the victim user's...
Microsoft Internet Explorer crossite access
Script from one site can access content of the page from different site with mhtml: URI handler...
CVE-2004-0380
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help CHM file that references the InfoTech Storage ITS...
MS04-013: Cumulative Update for Outlook Express (837009)
The remote host has a version of Outlook Express that has a bug in its MHTML URL processor that could allow an attacker to execute arbitrary code on this host. To exploit this flaw, an attacker would need to send a malformed email to a user of this host using Outlook, or would need to lure him in...