Search 219043 CVE descriptions
and 99761 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

CVE ID:CVE-2004-0380
Description:The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as (1) ms-its, (2) ms-itss, (3) its, or (4) mk:@MSITStore, aka the "MHTML URL Processing Vulnerability."
Test IDs:  
Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2004-0380
BugTraq ID: 9105
BugTraq ID: 9658
Bugtraq: 20040219 Microsoft Internet Explorer Unspecified CHM File Processing Arbitrary Code Execution Vulnerability (bid 9658) (Google Search)
Bugtraq: 20040328 IE ms-its: and mk:@MSITStore: vulnerability (Google Search)
Cert/CC Advisory: TA04-099A
Cert/CC Advisory: TA04-104A
CERT/CC vulnerability note: VU#323070
Microsoft Security Bulletin: MS04-013
XForce ISS Database: outlook-mhtml-execute-code(15705)

© 1998-2022 E-Soft Inc. All rights reserved.