HTTP: Microsoft Internet Explorer MHTML Redirect Information Disclosure

This signature detects an MHTML redirect specially crafted to exploit a known vulnerability in Internet Explorer. An attacker who successfully exploited this could read data from another Internet Explorer domain or the local computer.

Extended Description

Microsoft Outlook Express And Windows Mail are prone to an information-disclosure vulnerability because of an error in the Windows MHTML protocol handler. Note that an attacker can exploit this issue via Internet Explorer because the browser internally uses the vulnerable component of Outlook Express and Windows Mail. Successful exploits will allow the attacker to bypass Internet Explorer domain restrictions and to read data from a different Internet Explorer domain or security zone.

Affected Products

Microsoft windows_xp_professional

References

CVE: CVE-2008-1448

URL: http://www.microsoft.com/technet/security/Bulletin/MS08-048.mspx

Short Name

HTTP:STC:IE:MHTML-REDIR-INFO

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Microsoft Internet Explorer MHTML Redirect Information Disclosure

Extended Description

Affected Products

References

Found a potential security threat?