Description
IncrediMail stores attachments in a directory with a fixed name, which could make it easier for attackers to exploit vulnerabilities in other software that rely on installing and reading files from directories with known pathnames.
References
- 20020315 MSIE vulnerability exploitable with IncrediMail mailing-list
- incredimail-insecure-attachment-directory(8460) vdb-entry
- 4297 vdb-entry