NVD 暂无描述信息

Outlook Express的附件回车/换行密封过滤绕过漏洞

Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow remote attackers to bypass virus protection and or other filtering mechanisms via a mail message with headers that only contain the CR, which causes Outlook to create separate headers.

Windows中Outlook Express 5.5和6.0版本处理消息头中的回车("CR")，将它视为一个有效地回车/换行连结(CR/LF)，远程攻击者借助只含有CR的带有头的邮件消息绕过病毒保护或者其他过滤机制。

Windows上的Outlook Express 5.5和6.0将消息头中的行重定向("CR")视为一个有效的行重定向/终端符(CR/LF)组合，这可能导致远程攻击者通过包含只包含CR的邮件头绕过病毒防护和其他过滤机制，从而访问邮件。这导致Outlook创建单独的头。