CVE

Id
3804  
CVE No.
CVE-2001-0999  
Status
Candidate  
Description
Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected behavior that text/plain messages will not run script.  
Phase
Proposed (20020131)  
Votes
ACCEPT(2) Frech, Green | NOOP(2) Cole, Foat | REVIEWING(1) Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
17306 3804 CVE-2001-0999 BUGTRAQ:20010912 FREAK SHOW: Outlook Express 6.00  View
17307 3804 CVE-2001-0999 URL:http://www.securityfocus.com/archive/1/213754  View
17308 3804 CVE-2001-0999 BUGTRAQ:20010915 Proof-Of-Concept Perl Script for Bugtraq-ID: #3334  View
17309 3804 CVE-2001-0999 URL:http://www.securityfocus.com/archive/1/214453  View
17310 3804 CVE-2001-0999 XF:outlook-express-text-script-execution(7118)  View
17311 3804 CVE-2001-0999 URL:http://xforce.iss.net/static/7118.php  View
17312 3804 CVE-2001-0999 BID:3334  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
64169 JVNDB-2001-000143 Microsoft Outlook Express のヘッダ処理における任意のスクリプトを実行される脆弱性 Microsoft Outlook Express には、メールヘッダの解釈に不備があり、テキスト形式のメールに書かれたスクリプトを実行してしまう脆弱性が存在します。 CVE-2001-0999 3804 7.5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000143.html  View