header-logo
Suggest Exploit
vendor:
Outlook Express
by:
SecurityFocus
4.3
CVSS
MEDIUM
URI Obfuscation
601
CWE
Product Name: Outlook Express
Affected Version From: 6
Affected Version To: 6
Patch Exists: YES
Related CWE: N/A
CPE: o:microsoft:outlook_express
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002

Microsoft Outlook Express URI Obfuscation Vulnerability

Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability. An attacker could reportedly get a user to visit an attacker controlled site without the usual address bar feature in a web browser. This could potentially make it easier for an attacker to fool a user into trusting the site contents. The HTML code will cause the browser to display the link as http://www.example1.com, but the link will actually point to http://www.example2.com.

Mitigation:

Users should exercise caution when clicking on links in emails or other documents.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/10345/info

Microsoft Outlook Express has been reported prone to a URI obfuscation vulnerability.

This issue is reported to affect version 6.0 of the affected software, other versions might also be affected.

An attacker could reportedly get a user to visit an attacker controlled site without the usual address bar feature in a web browser. This could potentially make it easier for an attacker to fool a user into trusting the site contents.

<BASE href=http://www.example1.com target=_top>
<A href="http://www.example2.com">http://www.example1.com</A>

Navigation

Suggest Exploit

Services By CQR