CVE-2004-0380 The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Inter...
HighCVSS 10.0
EPSS 63.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft outlook express | = 5.5 | No fix listed |
| Microsoft outlook express | = 6.0 | No fix listed |
References
- 10523 third-party-advisory
- www.k-otik.net
- VU#323070 third-party-advisory us-government-resource
- 20040219 Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) mailing-list patch vendor-advisory
- 20040328 IE ms-its: and mk:@MSITStore: vulnerability exploit mailing-list patch vendor-advisory
- 9105 vdb-entry
- 9658 vdb-entry
- TA04-104A third-party-advisory us-government-resource
- MS04-013 vendor-advisory
- outlook-mhtml-execute-code(15705) vdb-entry
- oval:org.mitre.oval:def:1010 signature vdb-entry
- oval:org.mitre.oval:def:1028 signature vdb-entry
- oval:org.mitre.oval:def:882 signature vdb-entry
- oval:org.mitre.oval:def:990 signature vdb-entry