100 matches found
Outlook Express and Windows Mail NNTP Handling Code Execution (MS07-056; CVE-2007-3897)
Network News Transfer Protocol NNTP is an open standard designed for the distribution, enquiry, retrieval, and posting of news articles using a reliable stream-based transmission over the Internet. It is the core protocol of the newsgroup service. The most commonly used communication end point fo...
Microsoft IE MHTML协议处理器跨域信息泄露漏洞（MS08-048）
BUGTRAQ ID: 30585 CVECAN ID: CVE-2008-1448 Internet Explorer是微软操作系统中默认捆绑的WEB浏览器。 IE的MHTML协议处理器没有正确地解释MHTML URI重新定向。如果以UNC的形式指定了URI的话，则没有正确的应用安全策略： \MACHINENAMEORIP\PATHTORESOURCE 在这种情况下当远程站点试图访问本地资源时，Internet Explorer会无法强制区提升限制；在浏览远程站点的时候Internet Explorer会无法应用正确地安全区权限，允许将属于较小权限区的站点处理为更高权限的区。...
Information disclosure
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...
CVE-2008-1448
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...
CVE-2008-1448
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via...
CVE-2008-1448
Technical details for CVE-2008-1448 are not provided in the connected documents. Public details are limited to related CVEs; monitor for updates.
MS08-048: Security Update for Outlook Express and Windows Mail (951066)
The remote host is running a version of Microsoft Outlook Express which contains a flaw that might be used to cause an information disclosure. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open it. C Tenable Network Security, In...
Microsoft Security Bulletin MS08-048 - Important Security Update for Outlook Express and Windows Mail (951066)
Microsoft Security Bulletin MS08-048 - Important Security Update for Outlook Express and Windows Mail 951066 Published: August 12, 2008 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability in Outlook Express and Windows Mail. The...
Microsoft Outlook Express And Windows Mail MHTML Handler Information Disclosure Vulnerability
Description Microsoft Outlook Express And Windows Mail are prone to an information-disclosure vulnerability because of an error in the Windows MHTML protocol handler. Note that an attacker can exploit this issue via Internet Explorer because the browser internally uses the vulnerable component of...
Microsoft Windows MHTML URL Parsing Information Disclosure (MS08-048; CVE-2008-1448)
MHTML MIME Encapsulation of Aggregate HTML is an Internet standard that defines the MIME structure that is used to wrap HTML content. An information disclosure vulnerability has been reported in Outlook Express and Windows Mail due to a flaw in the MHTML protocol. The vulnerability is caused when...
Microsoft Outlook Express内容处置解析跨域信息泄露漏洞（MS07-034）
BUGTRAQ ID: 24410 CVECAN ID: CVE-2007-2227 Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。 MHTML协议处理程序将内容处置通知传递回Internet Explorer的方式中存在一个信息泄露漏洞，可能允许攻击者绕过Internet Explorer中的文件下载对话框。 攻击者可以通过构建特制的网页来利用该漏洞。如果用户使用Internet Explorer查看了该网页，漏洞就可能允许信息泄露。成功利用此漏洞的攻击者可以读取另一个Internet Explorer域中的数据。 Microsof...
Microsoft Outlook Express和Windows Mail NNTP协议回应数据堆溢出漏洞（MS07-056）
BUGTRAQ ID: 25908 CVECAN ID: CVE-2007-3897 Outlook Express和Windows Mail都是Windows操作系统所捆绑的邮件和新闻组客户端。NNTP（网络新闻传输协议）是用于读取和张贴Usenet文章的协议。 Windows Mail和Outlook Express在处理NNTP回复时存在堆溢出漏洞，恶意NNTP服务器可能利用此漏洞控制用户系统。 如果服务器返回了多于客户端所请求的数据，就可能将攻击者可控的值储存到所分配的内存范围之外，覆盖控制结构，导致执行任意指令。 Microsoft Outlook Express 6.0 SP...
iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow
Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Security Advisory 10.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2007 I. BACKGROUND Microsoft Windows Mail and Outlook Express are the default mail and news clients for Windows operating...
Microsoft Security Bulletin MS07-056 - Critical Security Update for Outlook Express and Windows Mail (941202)
Microsoft Security Bulletin MS07-056 - Critical Security Update for Outlook Express and Windows Mail 941202 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves one privately reported vulnerability. The vulnerability could allow remo...
Microsoft Outlook Express / Windows Mail NNTP buffer overflow
Heap memory overflow on NNTP server reply parsing...
Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)
Binary data 4233.prm...
Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)
Binary data 4232.prm...
Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)
Binary data 4235.prm...