Word/Outlook安全设置泄漏漏洞

(2004-07-13 09:54 )( )(天极网 )
导读-- 当设置使用Microsoft Word作为email编辑器时,有报告说容易引起安全设置泄露漏洞……

  详细描述:

  当设置使用Microsoft Word作为email编辑器时,有报告说容易引起安全设置泄露漏洞。在特定情况下,当收到一封HTML格式的电子邮件时,如果里面包含了一个未关闭的OBJECT标签,则在转信时,该标签所指向的URI会显示在Microsoft Outlook窗口。

  目前厂商未发布补丁。

  受影响系统:

Microsoft Outlook 2000 SP3
  + Microsoft Office 2000 SP3
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Professional SP3
  - Microsoft Windows 98
  - Microsoft Windows 98SE
  - Microsoft Windows ME
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP6a
  - Microsoft Windows XP Home
  - Microsoft Windows XP Home SP1
  - Microsoft Windows XP Professional
  - Microsoft Windows XP Professional SP1
Microsoft Outlook 2000 SR1
  - Microsoft Windows 2000 Advanced Server
  - Microsoft Windows 2000 Advanced Server SP1
  - Microsoft Windows 2000 Advanced Server SP2
  - Microsoft Windows 2000 Datacenter Server
  - Microsoft Windows 2000 Datacenter Server SP1
  - Microsoft Windows 2000 Datacenter Server SP2
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Server
  - Microsoft Windows 2000 Server SP1
  - Microsoft Windows 2000 Server SP2
  - Microsoft Windows 2000 Terminal Services
  - Microsoft Windows 2000 Terminal Services SP1
  - Microsoft Windows 2000 Terminal Services SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows 98SE
  - Microsoft Windows ME
  - Microsoft Windows NT Enterprise Server 4.0
  - Microsoft Windows NT Enterprise Server 4.0 SP1
  - Microsoft Windows NT Enterprise Server 4.0 SP2
  - Microsoft Windows NT Enterprise Server 4.0 SP3
  - Microsoft Windows NT Enterprise Server 4.0 SP4
  - Microsoft Windows NT Enterprise Server 4.0 SP5
  - Microsoft Windows NT Enterprise Server 4.0 SP6
  - Microsoft Windows NT Enterprise Server 4.0 SP6a
  - Microsoft Windows NT Server 4.0
  - Microsoft Windows NT Server 4.0 SP1
  - Microsoft Windows NT Server 4.0 SP2
  - Microsoft Windows NT Server 4.0 SP3
  - Microsoft Windows NT Server 4.0 SP4
  - Microsoft Windows NT Server 4.0 SP5
  - Microsoft Windows NT Server 4.0 SP6
  - Microsoft Windows NT Server 4.0 SP6a
  - Microsoft Windows NT Terminal Server 4.0
  - Microsoft Windows NT Terminal Server 4.0 SP1
  - Microsoft Windows NT Terminal Server 4.0 SP2
  - Microsoft Windows NT Terminal Server 4.0 SP3
  - Microsoft Windows NT Terminal Server 4.0 SP4
  - Microsoft Windows NT Terminal Server 4.0 SP5
  - Microsoft Windows NT Terminal Server 4.0 SP6
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP6a
Microsoft Outlook 2000 SP2
  - Microsoft Windows 2000 Advanced Server
  - Microsoft Windows 2000 Advanced Server SP1
  - Microsoft Windows 2000 Advanced Server SP2
  - Microsoft Windows 2000 Datacenter Server
  - Microsoft Windows 2000 Datacenter Server SP1
  - Microsoft Windows 2000 Datacenter Server SP2
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Server
  - Microsoft Windows 2000 Server SP1
  - Microsoft Windows 2000 Server SP2
  - Microsoft Windows 2000 Terminal Services
  - Microsoft Windows 2000 Terminal Services SP1
  - Microsoft Windows 2000 Terminal Services SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows 98SE
  - Microsoft Windows ME
  - Microsoft Windows NT Enterprise Server 4.0
  - Microsoft Windows NT Enterprise Server 4.0 SP1
  - Microsoft Windows NT Enterprise Server 4.0 SP2
  - Microsoft Windows NT Enterprise Server 4.0 SP3
  - Microsoft Windows NT Enterprise Server 4.0 SP4
  - Microsoft Windows NT Enterprise Server 4.0 SP5
  - Microsoft Windows NT Enterprise Server 4.0 SP6
  - Microsoft Windows NT Enterprise Server 4.0 SP6a
  - Microsoft Windows NT Server 4.0
  - Microsoft Windows NT Server 4.0 SP1
  - Microsoft Windows NT Server 4.0 SP2
  - Microsoft Windows NT Server 4.0 SP3
  - Microsoft Windows NT Server 4.0 SP4
  - Microsoft Windows NT Server 4.0 SP5
  - Microsoft Windows NT Server 4.0 SP6
  - Microsoft Windows NT Server 4.0 SP6a
  - Microsoft Windows NT Terminal Server 4.0
  - Microsoft Windows NT Terminal Server 4.0 SP1
  - Microsoft Windows NT Terminal Server 4.0 SP2
  - Microsoft Windows NT Terminal Server 4.0 SP3
  - Microsoft Windows NT Terminal Server 4.0 SP4
  - Microsoft Windows NT Terminal Server 4.0 SP5
  - Microsoft Windows NT Terminal Server 4.0 SP6
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP6a
Microsoft Outlook 2000
  - Microsoft Windows 2000 Advanced Server
  - Microsoft Windows 2000 Advanced Server SP1
  - Microsoft Windows 2000 Advanced Server SP2
  - Microsoft Windows 2000 Datacenter Server
  - Microsoft Windows 2000 Datacenter Server SP1
  - Microsoft Windows 2000 Datacenter Server SP2
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Server
  - Microsoft Windows 2000 Server SP1
  - Microsoft Windows 2000 Server SP2
  - Microsoft Windows 2000 Terminal Services
  - Microsoft Windows 2000 Terminal Services SP1
  - Microsoft Windows 2000 Terminal Services SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows 98SE
  - Microsoft Windows ME
  - Microsoft Windows NT Enterprise Server 4.0
  - Microsoft Windows NT Enterprise Server 4.0 SP1
  - Microsoft Windows NT Enterprise Server 4.0 SP2
  - Microsoft Windows NT Enterprise Server 4.0 SP3
  - Microsoft Windows NT Enterprise Server 4.0 SP4
  - Microsoft Windows NT Enterprise Server 4.0 SP5
  - Microsoft Windows NT Enterprise Server 4.0 SP6
  - Microsoft Windows NT Enterprise Server 4.0 SP6a
  - Microsoft Windows NT Server 4.0
  - Microsoft Windows NT Server 4.0 SP1
  - Microsoft Windows NT Server 4.0 SP2
  - Microsoft Windows NT Server 4.0 SP3
  - Microsoft Windows NT Server 4.0 SP4
  - Microsoft Windows NT Server 4.0 SP5
  - Microsoft Windows NT Server 4.0 SP6
  - Microsoft Windows NT Server 4.0 SP6a
  - Microsoft Windows NT Terminal Server 4.0
  - Microsoft Windows NT Terminal Server 4.0 SP1
  - Microsoft Windows NT Terminal Server 4.0 SP2
  - Microsoft Windows NT Terminal Server 4.0 SP3
  - Microsoft Windows NT Terminal Server 4.0 SP4
  - Microsoft Windows NT Terminal Server 4.0 SP5
  - Microsoft Windows NT Terminal Server 4.0 SP6
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP6a
Microsoft Outlook 2003
Microsoft Word 2000 SR1a
  + Microsoft Office 2000
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows NT 4.0
  - Microsoft Windows NT 4.0 SP1
  - Microsoft Windows NT 4.0 SP2
  - Microsoft Windows NT 4.0 SP3
  - Microsoft Windows NT 4.0 SP4
  - Microsoft Windows NT 4.0 SP5
  - Microsoft Windows NT 4.0 SP6
  - Microsoft Windows NT 4.0 SP6a
Microsoft Word 2000 SR1
  + Microsoft Office 2000
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows NT 4.0
  - Microsoft Windows NT 4.0 SP1
  - Microsoft Windows NT 4.0 SP2
  - Microsoft Windows NT 4.0 SP3
  - Microsoft Windows NT 4.0 SP4
  - Microsoft Windows NT 4.0 SP5
  - Microsoft Windows NT 4.0 SP6
  - Microsoft Windows NT 4.0 SP6a
Microsoft Word 2000 SP3
  + Microsoft Office 2000 SP3
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 2000 Professional SP3
  - Microsoft Windows 98
  - Microsoft Windows 98SE
  - Microsoft Windows ME
  - Microsoft Windows NT Workstation 4.0
  - Microsoft Windows NT Workstation 4.0 SP1
  - Microsoft Windows NT Workstation 4.0 SP2
  - Microsoft Windows NT Workstation 4.0 SP3
  - Microsoft Windows NT Workstation 4.0 SP4
  - Microsoft Windows NT Workstation 4.0 SP5
  - Microsoft Windows NT Workstation 4.0 SP6
  - Microsoft Windows NT Workstation 4.0 SP6a
  - Microsoft Windows XP Home
  - Microsoft Windows XP Home SP1
  - Microsoft Windows XP Professional
  - Microsoft Windows XP Professional SP1
Microsoft Word 2000 SP2
  + Microsoft Office 2000
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows NT 4.0
  - Microsoft Windows NT 4.0 SP1
  - Microsoft Windows NT 4.0 SP2
  - Microsoft Windows NT 4.0 SP3
  - Microsoft Windows NT 4.0 SP4
  - Microsoft Windows NT 4.0 SP5
  - Microsoft Windows NT 4.0 SP6
  - Microsoft Windows NT 4.0 SP6a
Microsoft Word 2000
  + Microsoft Office 2000
  - Microsoft Windows 2000 Professional
  - Microsoft Windows 2000 Professional SP1
  - Microsoft Windows 2000 Professional SP2
  - Microsoft Windows 95
  - Microsoft Windows 98
  - Microsoft Windows NT 4.0
  - Microsoft Windows NT 4.0 SP1
  - Microsoft Windows NT 4.0 SP2
  - Microsoft Windows NT 4.0 SP3
  - Microsoft Windows NT 4.0 SP4
  - Microsoft Windows NT 4.0 SP5
  - Microsoft Windows NT 4.0 SP6
  - Microsoft Windows NT 4.0 SP6a
Microsoft Word 2003

责编:
订阅新闻邮件) (推荐) (打印) (关闭页面) (至顶) (我对此感兴趣
笔名:
请您注意:

 遵守国家有关法律、法规,尊重网上道德,承担一切因您的行为而直接或间接引起的法律责任。

 天极网拥有管理笔名和留言的一切权利。