Outlook Express 6 Attachment Security Bypass Vulnerability
BID:3271
Info
Outlook Express 6 Attachment Security Bypass Vulnerability
| Bugtraq ID: | 3271 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Aug 30 2001 12:00AM |
| Updated: | Aug 30 2001 12:00AM |
| Credit: | This vulnerability was reported to Bugtraq by [email protected] <[email protected]>. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Outlook Express 6 Attachment Security Bypass Vulnerability
Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments.
A vulnerability exists which allows a file embedded within an HTML frame in an email message to bypass the dangerous file attachment type security feature. When a message containing an attachment embedded in this way is opened or previewed, the user is automatically prompted to open or save the attachment.
If the user attempts to open the file immediately, the action will fail. However, an assembler coded .exe attachment which has had it's extension changed to .bat will execute immediately. Regardless of the extension type, the user is able to save the attachment to disk.
Microsoft Outlook Express 6 contains a new security feature which prevents users from opening potentially harmful file attachments.
A vulnerability exists which allows a file embedded within an HTML frame in an email message to bypass the dangerous file attachment type security feature. When a message containing an attachment embedded in this way is opened or previewed, the user is automatically prompted to open or save the attachment.
If the user attempts to open the file immediately, the action will fail. However, an assembler coded .exe attachment which has had it's extension changed to .bat will execute immediately. Regardless of the extension type, the user is able to save the attachment to disk.
Exploit / POC
Outlook Express 6 Attachment Security Bypass Vulnerability
An example of how an email message would be crafted to take advantage of this vulnerability has been submitted by [email protected] <[email protected]>.
An example of how an email message would be crafted to take advantage of this vulnerability has been submitted by [email protected] <[email protected]>.
Solution / Fix
Outlook Express 6 Attachment Security Bypass Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Outlook Express 6 Attachment Security Bypass Vulnerability
References:
References:
- Microsoft Technet Security (Microsoft)