Exploit Microsoft Windows Vista - Windows Mail Local File Execution

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
29771
Проверка EDB
  1. Пройдено
Автор
KINGCOPE
Тип уязвимости
REMOTE
Платформа
WINDOWS
CVE
cve-2007-1658
Дата публикации
2007-03-23
Microsoft Windows Vista - Windows Mail Local File Execution
Код:
source: https://www.securityfocus.com/bid/23103/info

Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error.

An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link using the affected application.

The vendor reports this issue can also be exploited through use of UNC navigation to execute arbitrary remote code. This may facilitate a remote compromise of the affected computer. 

Content-Type: text/html\r\n\r\n<a href=\"c:/windows/system32/winrm?\">Click here!</a>
 
Источник
www.exploit-db.com

Похожие темы