Title: Rit Research Labs "The Bat!" Concealed Attachment Vulnerability
Severity: HIGH
Description:
"The Bat!" is an MUA for Windows by Rit Research Labs.
A remote attacker can compose an email message which contains an attached file having a carefully-composed filename, in which excess whitespace is used to obscure the filename in the "The Bat!" user's inbox.
Additionally, once the message has been displayed to the user, this vulnerability allows the icon of the attachment to be replaced with that of another type of object, obscuring the attachment's filetype and further obscuring the nature of a potentially hostile file.
This could lead a victim user to execute an attachment without being made aware of its filetype. In the event that the attachment is of an executable type, no warning will be issued to the user prior to the attached program's execution.
Such an attachment containing a hostile program or script could have serious security consequences for the affected system. If the current user is logged in with administrative privilege, the entire system, and potentially the local network, could be compromised.
Affected Products:
- Rit Research Labs The Bat! 1.0.0 11
- Rit Research Labs The Bat! 1.0.0 15
- Rit Research Labs The Bat! 1.0.0 28
- Rit Research Labs The Bat! 1.0.0 29
- Rit Research Labs The Bat! 1.0.0 31
- Rit Research Labs The Bat! 1.0.0 32
- Rit Research Labs The Bat! 1.0.0 35
- Rit Research Labs The Bat! 1.0.0 36
- Rit Research Labs The Bat! 1.0.0 37
- Rit Research Labs The Bat! 1.0.0 39
- Rit Research Labs The Bat! 1.0.0 41
- Rit Research Labs The Bat! 1.0.0 43
- Rit Research Labs The Bat! 1.0.0 build 1336
- Rit Research Labs The Bat! 1.0.0 build 1349
- Rit Research Labs The Bat! 1.1.0
- Rit Research Labs The Bat! 1.101.0
- Rit Research Labs The Bat! 1.14.0
- Rit Research Labs The Bat! 1.15.0
- Rit Research Labs The Bat! 1.17.0
- Rit Research Labs The Bat! 1.18.0
- Rit Research Labs The Bat! 1.19.0
- Rit Research Labs The Bat! 1.21.0
- Rit Research Labs The Bat! 1.22.0
- Rit Research Labs The Bat! 1.31.0
- Rit Research Labs The Bat! 1.32.0
- Rit Research Labs The Bat! 1.33.0
- Rit Research Labs The Bat! 1.34.0
- Rit Research Labs The Bat! 1.35.0
- Rit Research Labs The Bat! 1.36.0
- Rit Research Labs The Bat! 1.39.0
- Rit Research Labs The Bat! 1.41.0
- Rit Research Labs The Bat! 1.42.0
- Rit Research Labs The Bat! 1.42.0 f
- Rit Research Labs The Bat! 1.43.0
- Rit Research Labs The Bat! 1.44.0
- Rit Research Labs The Bat! 1.45.0
- Rit Research Labs The Bat! 1.46.0
- Rit Research Labs The Bat! 1.47.0
- Rit Research Labs The Bat! 1.48.0
- Rit Research Labs The Bat! 1.49.0
References:
- Rit Software Products: The Bat! homepage
Juniper Networks provides this content via a wide variety of sources and production methods. If notified of errors or omissions in the content of this page, Juniper Networks, at its discretion, will modify or remove the page or leave the content as is, depending on various factors including but not limited to the reputation and authority of the party providing the notification. Please use the contact information displayed elsewhere on this page to report any errors or omissions regarding the content on this page.
