Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Argument injection vulnerability in Internet Explorer 6 for Windows XP SP2 allows user-assisted remote attackers to modify command line arguments to an invoked mail client via " (double quote) characters in a mailto: scheme handler, as demonstrated by launching Microsoft Outlook with an arbitrary filename as an attachment. NOTE: it is not clear whether this issue is implementation-specific or a problem in the Microsoft API.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Windows XP SP2 Internet Explorer 参数注入漏洞
Vulnerability Description
Windows XP SP2中的IE6浏览器存在参数注入漏洞。这使得用户辅助攻击者可以借助于mailto:模式处理器中的双引号字符修改传递到调用的邮件客户端中的命令行参数，如以任意文件名作为附件启动微软Outlook。 注意：尚不清楚该问题是特定执行问题还是微软API中存在的问题。
CVSS Information
N/A
Vulnerability Type
N/A