MHTML Protocol Handler Issue in Microsoft Outlook Express by Microsoft

CVE-2004-0380

Summary

The MHTML protocol handler vulnerability in Microsoft Outlook Express versions 5.5 SP2 and 6 SP1 allows remote attackers to exploit domain restrictions, leading to the execution of arbitrary code. This is particularly evident when script code in compiled help (.CHM) files utilizes the InfoTech Storage (ITS) protocol handlers like ms-its, ms-itss, and mk:@MSITStore. Such an exploit can compromise user systems without their consent, making it a serious security risk for users of the affected software.

References