Description
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
References
- 4334 vdb-entry
- outlook-iframe-url(8611) vdb-entry
- 20020320 Questionable security policies in Outlook 2002 mailing-list