|
|
| |
| Microsoft has added a security setting to Outlook Express 6: Do not allow attachments to be saved or opened that could potentially be a virus. This setting is not enabled as default, but Microsoft is suggesting it in this document entitled Using Virus Protection Features in Outlook Express 6. The vulnerability lies in the fact that forwarded mail that contain such harmful attachments, will not be "grayed" out to discourage users from trying to open it (unlike when reading the original message). |
| |
Credit:
The information has been provided by Arie Slob.
|
| |
Vulnerable systems:
Outlook Express version 6.0
Vendor status:
When contacted, a person from Microsoft's Security Response Center wrote in an e-mail: "The capability to forward an email with an attachment is a feature in Outlook Express that is by-design. As you mention, Outlook Express does allow the blocking of unsafe attachments.
|
|
|
