full-disclosure - Outlook Express

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

From: chows at ozemail.com.au (Gregh)
Subject: Outlook Express - is this possible?

I may just be confusing myself here so bear with me:

I believe an exploit cropped up within the last 12 months or so for OE
(version unknown) where the user has preview pane OFF and receives an email
that he doesn't actually double click on to open. However, in deleting it,
the user either web bugs himself or puts some sort of exploit in. I cant
remember whether I am confusing myself with more than one issue here but can
anyone help. Did that happen, was it possible at one stage or possible now?

I believe the act of deleting something from the inbox is just a marker
change in OE to show it in deleted rather than inbox and not a program run
per se.

Can anyone verify this for me please, one way or the other?

Thanks for any help.

Greg.