Description
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 1
- Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure EDB-27745 · dos · Apr 27, 2006 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- oval:org.mitre.oval:def:1605 vdb-entry signature
- 19738 third-party-advisory
- http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/
- 22477 third-party-advisory
- MS07-034 vendor-advisory
- ie-mhtml-information-disclosure(26281) vdb-entry
- 20061026 IE7 is a Source of Problem - Secunia IE7 Release Incident of October 2006 mailing-list
- 1016005 vdb-entry
- 20061025 IE7 status: 8 days after release, 3 unfixed issues mailing-list
- SSRT071438 vendor-advisory
- 25073 vdb-entry
- 17717 vdb-entry
- ADV-2006-1558 vdb-entry
- TA07-163A third-party-advisory
- VU#783761 third-party-advisory
- ADV-2007-2154 vdb-entry