Oval Definition:	oval:org.mitre.oval:def:2085
Revision Date: 2012-09-10 Version: 44 Title: Content Disposition Parsing Cross Domain Information Disclosure Vulnerability Description: The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability." Family: windows Class: vulnerability Status: ACCEPTED Reference(s): CVE-2007-2227 Platform(s): Microsoft Windows 2000 Microsoft Windows Server 2003 Microsoft Windows XP Product(s): Microsoft Outlook Express Definition Synopsis Microsoft Outlook Express 6 on Win XP SP2 Microsoft Windows XP SP2 or later is installed AND Microsoft Outlook Express 6.0 for Windows XP/2003 is installed AND the version of inetcomm.dll is less than 6.0.2900.3138 OR Microsoft Outlook Express 6 on Win 2k3 SP1 Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Outlook Express 6.0 for Windows XP/2003 is installed AND the version of inetcomm.dll is less than 6.0.3790.2929 OR Microsoft Outlook Express 6 on Win 2k3 SP2 Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Outlook Express 6.0 for Windows XP/2003 is installed AND the version of inetcomm.dll is less than 6.0.3790.4073 OR Microsoft Outlook Express 6 on Win XP SP2 (64-bit) Microsoft Outlook Express 6.0 for Windows XP/2003 is installed AND the version of inetcomm.dll is less than 6.0.3790.4073 AND Microsoft Windows XP x64 Edition SP2 is installed OR Microsoft Outlook Express 6 on Win XP SP1 (64-bit) Microsoft Windows XP SP1 (64-bit) is installed AND Microsoft Outlook Express 6.0 for Windows XP/2003 is installed AND the version of inetcomm.dll is less than 6.0.3790.2929
BACK