Signature Detail
Short Name |
SMTP:OUTLOOK:LOCAL-LINK |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
SMTP |
Keywords |
Local Link in Hyperlink |
Release Date |
2007/06/12 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: Local Link in Hyperlink
This signature detects a locally referenced hyper-link in an HTML formatted e-mail. Windows Mail is vulnerable. Such links could bypass access controls and allow arbitrary code execution.
Extended Description
Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error. An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link using the affected application. The vendor reports this issue can also be exploited through use of UNC navigation to execute arbitrary remote code. This may facilitate a remote compromise of the affected computer.
Affected Products
- Microsoft Windows Mail
- Microsoft Windows Vista Business
- Microsoft Windows Vista Enterprise
- Microsoft Windows Vista Home Basic
- Microsoft Windows Vista Home Premium
- Microsoft Windows Vista Ultimate
References
- BugTraq: 23103
- CVE: CVE-2007-1658