header-logo
Suggest Exploit
vendor:
Outlook
by:
SecurityFocus
N/A
CVSS
N/A
Microsoft Outlook 2003 Predictable File Location
None
CWE
Product Name: Outlook
Affected Version From: Microsoft Outlook 2003
Affected Version To: Microsoft Outlook 2003
Patch Exists: Unknown
Related CWE: None
CPE: None
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: Internet Explorer
2003

Microsoft Outlook 2003 Predictable File Location

Microsoft Outlook 2003 is reported to be prone to store files that are specified in img tags, in predictable locations. This may present a security risk because many known (and potential) Internet Explorer vulnerabilities depend on the attacker being able to directly reference malicious content on a victim system. Given both the ability to place such content on the file system and reference it specifically by location, exploitation of many browser-based vulnerabilities becomes possible.

Mitigation:

None
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/10307/info

Microsoft Outlook 2003 is reported to be prone to store files that are specified in img tags, in predictable locations. 

This may present a security risk because many known (and potential) Internet Explorer vulnerabilities depend on the attacker being able to directly reference malicious content on a victim system. Given both the ability to place such content on the file system and reference it specifically by location, exploitation of many browser-based vulnerabilities becomes possible.

<img src="malware.htm" style="display:none">

Navigation

Suggest Exploit

Services By CQR