NVD

Id
1398  
Name
CVE-2008-1448  
Description
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka "URL Parsing Cross-Domain Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2008-08-12  
Modified Date
2011-06-20  
Seq
2008-1448  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
9139 1398 CVE-2008-1448 HPSBST02360  View
9140 1398 CVE-2008-1448 oval:org.mitre.oval:def:5886  View
9141 1398 CVE-2008-1448 http://www.coresecurity.com/content/internet-explorer-zone-elevation  View
9142 1398 CVE-2008-1448 MS08-048  View
9143 1398 CVE-2008-1448 20080813 CORE-2008-0103: Internet Explorer Zone Elevation Restrictions Bypass and Security Zone Restrictions Bypass  View
9144 1398 CVE-2008-1448 30585  View
9145 1398 CVE-2008-1448 1020679  View
9146 1398 CVE-2008-1448 1020680  View
9147 1398 CVE-2008-1448 TA08-225A  View
9148 1398 CVE-2008-1448 ADV-2008-2352  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46333 JVNDB-2008-001643 Microsoft Outlook および Windows Mail の MHTML プロトコルハンドラにおける Internet Explorer のドメイン制限を回避される脆弱性 Microsoft Outlook Express および Windows Mail の MHTML プロトコルハンドラには、MHTML URL リダイレクションの処理に不備があるため、Internet Explorer のドメイン制限を回避される脆弱性が存在します。 CVE-2008-1448 31561 CVE-2008-1448 1398 7.1 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001643.html 2008-08-12 2008-09-09 View