Description
Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
References
- 20040513 POA: Outlook Expresss 6.00 mailing-list
- 11607 third-party-advisory
- 6121 vdb-entry