CVE

Id
8808  
CVE No.
CVE-2004-0380  
Status
Candidate  
Description
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."  
Phase
Assigned (20040405)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
55649 8808 CVE-2004-0380 BUGTRAQ:20040219 Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658)  View
55650 8808 CVE-2004-0380 URL:http://www.securityfocus.com/archive/1/354447  View
55651 8808 CVE-2004-0380 BUGTRAQ:20040328 IE ms-its: and mk:@MSITStore: vulnerability  View
55652 8808 CVE-2004-0380 URL:http://www.securityfocus.com/archive/1/358913  View
55653 8808 CVE-2004-0380 MISC:http://www.k-otik.net/bugtraq/02.18.InternetExplorer.php  View
55654 8808 CVE-2004-0380 MS:MS04-013  View
55655 8808 CVE-2004-0380 URL:http://www.microsoft.com/technet/security/bulletin/MS04-013.mspx  View
55656 8808 CVE-2004-0380 CERT:TA04-104A  View
55657 8808 CVE-2004-0380 URL:http://www.us-cert.gov/cas/techalerts/TA04-104A.html  View
55658 8808 CVE-2004-0380 CERT:TA04-099A  View
55659 8808 CVE-2004-0380 CERT-VN:VU#323070  View
55660 8808 CVE-2004-0380 URL:http://www.kb.cert.org/vuls/id/323070  View
55661 8808 CVE-2004-0380 BID:9658  View
55662 8808 CVE-2004-0380 URL:http://www.securityfocus.com/bid/9658  View
55663 8808 CVE-2004-0380 BID:9105  View
55664 8808 CVE-2004-0380 URL:http://www.securityfocus.com/bid/9105  View
55665 8808 CVE-2004-0380 SECUNIA:10523  View
55666 8808 CVE-2004-0380 URL:http://secunia.com/advisories/10523  View
55667 8808 CVE-2004-0380 XF:outlook-mhtml-execute-code(15705)  View
55668 8808 CVE-2004-0380 URL:http://xforce.iss.net/xforce/xfdb/15705  View
55669 8808 CVE-2004-0380 OVAL:oval:org.mitre.oval:def:1010  View
55670 8808 CVE-2004-0380 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1010  View
55671 8808 CVE-2004-0380 OVAL:oval:org.mitre.oval:def:1028  View
55672 8808 CVE-2004-0380 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1028  View
55673 8808 CVE-2004-0380 OVAL:oval:org.mitre.oval:def:882  View
55674 8808 CVE-2004-0380 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:882  View
55675 8808 CVE-2004-0380 OVAL:oval:org.mitre.oval:def:990  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62761 JVNDB-2004-000102 MySQL の mysqlbug におけるシンボリックリンク攻撃を受ける脆弱性 MySQL に含まれている mysqlbug には、バグレポートを作成した際に内容を変更しないでテキストエディタを終了した場合、セキュリティ上不適切な方法で一時ファイル (/tmp/failed-mysql-bugreport) が作成されるため、シンボリックリンク攻撃を受ける脆弱性が存在します。 CVE-2004-0381 8808 2.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000102.html  View