CVE-2008-1448
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 26.6%, higher than 98% of all known CVEs. Patch or mitigate before the next change window.
Description
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka "URL Parsing Cross-Domain Information Disclosure Vulnerability."
- CVSS 2.0
- 7.1 HIGHAV:N/AC:M/Au:N/C:C/I:N/A:N
- EPSS
- 26.63% probability · 98th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-264
- Affected
- microsoft/outlook express · microsoft/windows mail
- Source
- secure@microsoft.com
References
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://secunia.com/advisories/31415Patch, Vendor Advisory
- http://www.coresecurity.com/content/internet-explorer-zone-elevation
- http://www.securityfocus.com/archive/1/495458/100/0/threaded
- http://www.securityfocus.com/bid/30585Patch
- http://www.securitytracker.com/id?1020679
- http://www.securitytracker.com/id?1020680
- http://www.us-cert.gov/cas/techalerts/TA08-225A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2352Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5886
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://secunia.com/advisories/31415Patch, Vendor Advisory
- http://www.coresecurity.com/content/internet-explorer-zone-elevation
- http://www.securityfocus.com/archive/1/495458/100/0/threaded
- http://www.securityfocus.com/bid/30585Patch
- http://www.securitytracker.com/id?1020679
- http://www.securitytracker.com/id?1020680
- http://www.us-cert.gov/cas/techalerts/TA08-225A.htmlUS Government Resource
- http://www.vupen.com/english/advisories/2008/2352Vendor Advisory
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-048
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5886
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.