Microsoft Windows Vista - Windows Mail Local File Execution

Author: kingcope
type: remote
platform: windows
port: 
date_added: 2007-03-23 
date_updated: 2013-11-22 
verified: 1 
codes: CVE-2007-1658;OSVDB-34102 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/23103/info

Microsoft Windows Vista Windows Mail is prone to a local file-execution vulnerability due to a design error.

An attackers may exploit this issue to execute local files. The attacker must entice a victim into opening a maliciously crafted link using the affected application.

The vendor reports this issue can also be exploited through use of UNC navigation to execute arbitrary remote code. This may facilitate a remote compromise of the affected computer.

Content-Type: text/html\r\n\r\n<a href=\"c:/windows/system32/winrm?\">Click here!</a>