PT-2004-3033 · Microsoft · Outlook Express

Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-2137

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Outlook Express version 6.0

Description The issue allows remote attackers to obtain sensitive information by leaking the BCC recipients of a message to the addresses listed in the To and CC fields when sending multipart e-mail messages using the "Break apart messages larger than" setting.

Recommendations For Outlook Express version 6.0, avoid using the "Break apart messages larger than" setting when sending emails with BCC recipients to prevent information leakage.

Correção

Identificadores relacionados

CVE-2004-2137

Produtos afetados

Outlook Express

Referências · 8

• http://securityfocus.com/bid/11040 · Nota
• http://secunia.com/advisories/12376 · Aviso do Fabricante
• http://support.microsoft.com/kb/843555 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17098 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-2137 · Nota de Segurança
• http://osvdb.org/9167 · Nota
• http://securitytracker.com/id?1011067 · Correção
• http://networksecurity.fi/advisories/outlook-bcc.html · Aviso do Fabricante