Vulnerability CVE-2003-0241

Vulnerability CVE-2003-0241

Published: 2003-06-09 Modified: 2012-02-12

Description:

FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score	Impact Subscore	Exploitability Subscore
7.5/10	6.4/10	10/10

Exploit range	Attack complexity	Authentication
Remote	Low	No required
Confidentiality impact	Integrity impact	Availability impact
Partial	Partial	Partial

Affected software
Frontrange -> Goldmine

References:

http://www.secnap.net/security/gm001.html

http://archives.neohapsis.com/archives/vulnwatch/2003-q2/0091.html

Copyright 2024, cxsecurity.com