|
|
Microsoft IE / Outlook / Outlook Express存在执行任意JAVA代码的漏洞
发布时间：2000-10-01
更新时间：2000-10-01
严重程度：高
威胁程度：普通用户访问权限
错误类型：设计错误
利用方式：客户机模式
受影响系统Microsoft Internet Explorer 5.5
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows NT 2000
Microsoft Internet Explorer 5.01
+ Microsoft Windows 98
+ Microsoft Windows 95
+ Microsoft Windows NT 4.0
+ Microsoft Windows NT 2000
Microsoft Internet Explorer 5.0 for Windows NT 4.0
+ Microsoft Windows NT 4.0
Microsoft Internet Explorer 5.0 for Windows 98
+ Microsoft Windows 98
Microsoft Internet Explorer 5.0 for Windows 95
+ Microsoft Windows 95
Microsoft Internet Explorer 5.0 for Windows 2000
- Microsoft Windows NT 2000
Microsoft Internet Explorer 4.1 for Windows NT 4.0
+ Microsoft Windows NT 4.0
Microsoft Internet Explorer 4.1 for Windows 98
+ Microsoft Windows 98
Microsoft Internet Explorer 4.1 for Windows 95
+ Microsoft Windows 95
Microsoft Internet Explorer 4.0.1 for Windows NT 4.0
- Microsoft Windows NT 4.0
Microsoft Internet Explorer 4.0.1 for Windows 98
- Microsoft Windows 98
Microsoft Internet Explorer 4.0.1 for Windows 95
- Microsoft Windows 95
Microsoft Outlook 98
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
Microsoft Outlook 97
Microsoft Outlook 2000
Microsoft Outlook Express 5.5
- Microsoft Windows 98se
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows NT 2000
+ Microsoft Internet Explorer 5.5
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows NT 2000
+ Microsoft Internet Explorer 5.0.1 for Windows NT 4.0
- Microsoft Windows NT 4.0
+ Microsoft Internet Explorer 5.0.1 for Windows 98
- Microsoft Windows 98
+ Microsoft Internet Explorer 5.0.1 for Windows 95
- Microsoft Windows 95
+ Microsoft Internet Explorer 5.0.1 for Windows 2000
- Microsoft Windows NT 2000
+ Microsoft Internet Explorer 5.01
+ Microsoft Windows 98
+ Microsoft Windows 95
+ Microsoft Windows NT 4.0
+ Microsoft Windows NT 2000
Microsoft Outlook Express 5.01
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
- Microsoft Windows NT 2000
Microsoft Outlook Express 5.0
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0
Microsoft Outlook Express 4.0
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows NT 4.0 详细描述
一个攻击者可以通过设置定制的代码在JAVA APPLET里面，就可以通脱HTML MAIL
和站点来访问远程系统中的文件。一个任意的代码库可以通过<OBJECT>标志来
连接一个jar文件，使用IE就会执行这些代码。
测试代码
Georgi Guninski <guninski@guninski.com>设置了一个演示页面可以显示c:\
和c:\text.txt
http://www.guninski.com/javacodebase1.html
解决方案
尚无
相关信息
|
