CVE-2006-2111

Published: May 1, 2006Modified: Apr 16, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability."

Affected (1)

Products: Microsoft: Outlook Express

1 product

Outlook Express

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Outlook Express	Version 6.0

Related CWEs

Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

References (32)

http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/19738

Source: cve@mitre.org

ExploitVendor Advisory

http://secunia.com/advisories/22477

Source: cve@mitre.org

Vendor Advisory

http://securitytracker.com/id?1016005

Source: cve@mitre.org

Exploit

http://www.kb.cert.org/vuls/id/783761

Source: cve@mitre.org

US Government Resource

http://www.osvdb.org/25073

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449883/100/200/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/449917/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/471947/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/17717

Source: cve@mitre.org

http://www.us-cert.gov/cas/techalerts/TA07-163A.html

Source: cve@mitre.org

US Government Resource

http://www.vupen.com/english/advisories/2006/1558

Source: cve@mitre.org

Vendor Advisory

http://www.vupen.com/english/advisories/2007/2154

Source: cve@mitre.org

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/26281

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1605

Source: cve@mitre.org

http://secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/advisories/19738

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://secunia.com/advisories/22477

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://securitytracker.com/id?1016005

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.kb.cert.org/vuls/id/783761

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.osvdb.org/25073

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/449883/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/449917/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/471947/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17717

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA07-163A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

http://www.vupen.com/english/advisories/2006/1558

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.vupen.com/english/advisories/2007/2154

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/26281

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1605

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.