CVE-2008-1448
First published: Wed Aug 13 2008(Updated: )
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka "URL Parsing Cross-Domain Information Disclosure Vulnerability."
Credit: secure@microsoft.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Outlook Express | =5.5-sp2 | |
| Microsoft Outlook Express | =6.0 | |
| Microsoft Outlook Express | =6.0-sp1 | |
| Microsoft Outlook.com |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://www.securityfocus.com/bid/30585
- http://www.securitytracker.com/id?1020679
- http://www.securitytracker.com/id?1020680
- http://secunia.com/advisories/31415
- http://marc.info/?l=bugtraq&m=121915960406986&w=2
- http://www.coresecurity.com/content/internet-explorer-zone-elevation
- http://www.us-cert.gov/cas/techalerts/TA08-225A.html
- http://www.vupen.com/english/advisories/2008/2352
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5886
- http://www.securityfocus.com/archive/1/495458/100/0/threaded
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-048
Frequently Asked Questions
What is the severity of CVE-2008-1448?
CVE-2008-1448 has a medium severity rating as it allows remote attackers to read arbitrary files.
How do I fix CVE-2008-1448?
To fix CVE-2008-1448, ensure that you are using an updated version of Microsoft Outlook Express or Windows Mail.
What software is affected by CVE-2008-1448?
CVE-2008-1448 affects Microsoft Outlook Express versions 5.5 SP2, 6 SP1, and Windows Mail.
Can CVE-2008-1448 lead to unauthorized access?
Yes, CVE-2008-1448 can allow attackers to bypass access restrictions on UNC share pathnames.
Is there a workaround for CVE-2008-1448?
A temporary workaround for CVE-2008-1448 may include restricting the use of UNC paths within the affected software.
- agent/type
- agent/softwarecombine
- agent/remedy
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/weakness
- agent/severity
- agent/last-modified-date
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- vendor/microsoft
- canonical/microsoft outlook express
- version/microsoft outlook express/5.5-sp2
- version/microsoft outlook express/6.0
- version/microsoft outlook express/6.0-sp1
- canonical/microsoft outlook.com