Home › Resources › Threat Monitor

Threat Monitor

 

« Back to list

Troj.Clicker.HTML.Agent.aq

 
Aliases:
Pattern:200909201330
Threat Type Propagation Methods Systems Affected Risk Level
  • TrojanClicker
  • Windows NT
  • Windows XP
  • Windows 2000
  • Windows 95/98/ME
  • MS-DOS
  • Other
  • Low
 
A vulnerability has been discovered in Outlook Express. There is a cross-domain vulnerability in the way the Outlook Express MHTML protocol handler (mhtml:) determines the security domain of data referenced by a URL that specifies an alternate location. It is possible to use this protocol to force a browser into the Local Zone by redirecting into a non-existent MHTML file. It allows remote attackers to bypass domain restrictions and execute arbitrary code, as demonstrated on Internet Explorer using script in a compiled help (CHM) file that references the InfoTech Storage (ITS) protocol handlers such as ms-its:, ms-itss: and mk:@MSITStore: URIs.
Affected Versions: Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 6.0
Microsoft Outlook Express 5.5 SP2

Back to Top

Next Steps

Questions? Call: (888) 233-0776

On Demand Demos

GUI demonstrations about ProSecure™ security appliances

Become a Partner

Our partners are our greatest asset. Join the PowerShift Program and expand your portfolio of security products.