返回列表 发帖

Microsoft IE / Outlook / Outlook Express存在执行任意JAVA代码的漏洞

受影响系统 Microsoft Internet Explorer 5.5 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 Microsoft Internet Explorer 5.01 + Microsoft Windows 98 + Microsoft Windows 95 + Microsoft Windows NT 4.0 + Microsoft Windows NT 2000 Microsoft Internet Explorer 5.0 for Windows NT 4.0 + Microsoft Windows NT 4.0 Microsoft Internet Explorer 5.0 for Windows 98 + Microsoft Windows 98 Microsoft Internet Explorer 5.0 for Windows 95 + Microsoft Windows 95 Microsoft Internet Explorer 5.0 for Windows 2000 - Microsoft Windows NT 2000 Microsoft Internet Explorer 4.1 for Windows NT 4.0 + Microsoft Windows NT 4.0 Microsoft Internet Explorer 4.1 for Windows 98 + Microsoft Windows 98 Microsoft Internet Explorer 4.1 for Windows 95 + Microsoft Windows 95 Microsoft Internet Explorer 4.0.1 for Windows NT 4.0 - Microsoft Windows NT 4.0 Microsoft Internet Explorer 4.0.1 for Windows 98 - Microsoft Windows 98 Microsoft Internet Explorer 4.0.1 for Windows 95 - Microsoft Windows 95 Microsoft Outlook 98 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 Microsoft Outlook 97 Microsoft Outlook 2000 Microsoft Outlook Express 5.5 - Microsoft Windows 98se - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 + Microsoft Internet Explorer 5.5  - Microsoft Windows 98  - Microsoft Windows 95  - Microsoft Windows NT 4.0  - Microsoft Windows NT 2000 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0  - Microsoft Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows 98  - Microsoft Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 95  - Microsoft Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 2000  - Microsoft Windows NT 2000 + Microsoft Internet Explorer 5.01  + Microsoft Windows 98  + Microsoft Windows 95  + Microsoft Windows NT 4.0  + Microsoft Windows NT 2000 Microsoft Outlook Express 5.01 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 - Microsoft Windows NT 2000 Microsoft Outlook Express 5.0 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 Microsoft Outlook Express 4.0 - Microsoft Windows 98 - Microsoft Windows 95 - Microsoft Windows NT 4.0 详细描述 一个攻击者可以通过设置定制的代码在JAVA APPLET里面,就可以通脱HTML MAIL 和站点来访问远程系统中的文件。一个任意的代码库可以通过标志来 连接一个jar文件,使用IE就会执行这些代码。 测试代码 Georgi Guninski 设置了一个演示页面可以显示c:\ 和c:\text.txt http://www.guninski.com/javacodebase1.html 解决方案 尚无 相关信息

返回列表 回复 发帖