CVE-2003-0241 FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers...
HighCVSS 7.5
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| frontrange goldmine | = 5.70 | No fix listed |
| frontrange goldmine | = 6.00 | No fix listed |
References
- 20030528 SECNAP Security Advisory: Invalid HTML processing in GoldMine(tm) exploit mailing-list patch vendor-advisory
- www.secnap.net exploit patch vendor-advisory