Threat Monitor
Troj.Clicker.HTML.Agent.aq
| Aliases: | |
|---|---|
| Pattern: | 200909201330 |
| Threat Type | Propagation Methods | Systems Affected | Risk Level |
|---|---|---|---|
|
|
|
A vulnerability has been discovered in Outlook Express. There is a cross-domain vulnerability in the way the Outlook Express MHTML protocol handler (mhtml:) determines the security domain of data referenced by a URL that specifies an alternate location. It is possible to use this protocol to force a browser into the Local Zone by redirecting into a non-existent MHTML file. It allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as ms-its:, ms-itss: and mk:@MSITStore: URIs.
Affected Versions: Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 6.0
Microsoft Outlook Express 5.5 SP2
Affected Versions: Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 6.0
Microsoft Outlook Express 5.5 SP2
