CVE-2008-0110

Related Files

iDEFENSE Security Advisory 2008-03-11.3

Posted Mar 13, 2008

Authored by iDefense Labs, Greg MacManus | Site idefense.com

iDefense Security Advisory 03.11.08 - Remote exploitation of an input validation error in the handling of "mailto" URIs by Microsoft Corp.'s Outlook may allow arbitrary code execution. It is possible to construct a "mailto" URI which causes the web browser to pass extra command line switches to Outlook. These switches can modify Outlook's account configuration. iDefense has confirmed the existence of this vulnerability in Microsoft Outlook 2007 on Windows XP SP2. Previous versions may also be affected.

tags | advisory, remote, web, arbitrary, code execution

systems | windows

advisories | CVE-2008-0110

SHA-256 | 7156ee06ae2b1666a162d1ef60b7458511c3b4ab23d425ed51aebc8ea63bd76b

Download | Favorite | View