Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Outlook IFrame嵌入URL漏洞
Vulnerability Description
Microsoft Outlook是流行的Windows平台下的邮件客户端。 Microsoft Outlook存在漏洞可以导致用户端在不需要用户访问站点就可以初始化从WEB站点下载文件的会话。 在HTML形式邮件中，Outlook会自动下载在IFRAME标记中URL所标识的WEB站点上的可执行文件，一般情况下Outlook在当邮件下载的时候，会询问用户是否打开或者保存或者取消下载，当嵌入了此类IFRAME标记的邮件信息被用户读取的时候，Outlook就会没有任何安全警告的情况下下载可执行文件。
CVSS Information
N/A
Vulnerability Type
N/A