OSVDB ID: 6007 Title: Microsoft IE/Outlook IMG/HREF Tag Code Execution |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft IE and Outlook contain a flaw that may allow a malicious attacker to send users a link that loads arbitrary html code which is not displayed and is stored locally. The issue is triggered when an IMG tag is enclosed in the A HREF tag, as the reference content is stored locally in the user's cache. It is possible that the flaw may allow an attacker to trick users into executing stored content locally by sending a URL whose A HREF tag points them to the locally cached content. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Other Impact: Loss of Integrity Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version Outlook 2003 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds. |
Products |
|
References |
|
Credit |
|
excite.com
-