full-disclosure - Outlook Express

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <4014F045.8090105@nbnet.nb.ca>
From: smenard at nbnet.nb.ca (Steve Menard)
Subject: Outlook Express - is this possible?

Gregh wrote:
 >I may just be confusing myself here so bear with me:
 >
 >I believe an exploit cropped up within the last 12 months or so for OE
 >(version unknown) where the user has preview pane OFF and receives an 
 >email that he doesn't actually double click on to open. However, in 
 >deleting it, the user either web bugs himself or puts some sort of 
 >exploit in. I cant
 >remember whether I am confusing myself with more than one issue here 
 >but can anyone help. Did that happen, was it possible at one stage or 
 >possible now?
 >
 >I believe the act of deleting something from the inbox is just a marker
 >change in OE to show it in deleted rather than inbox and not a program 
 >run per se.
=-=-=-=-=-=-=-=--=-=-
best guess

option in preferences

Reply to messages in format they were sent

hence webbugs

as follow-up to my earlier
...
Unaware of any such exploit.
but there are a few setting we should check.

the mail would need to be processed and it's contents triggered something

I'd suggest checking out the read receipt.
since it grabs [our untrusted input] our return email addr
not done any testing though

Maybe it has something to do about auto - answering.
ala Receipt-required flags

I've seen when people had
read, and allowed read receipt
read, disallowed receipt
deleted without reading. and sender got notified DOH

Next I'll have to remember which others may apply

if attachments are downloaded with email s ...
my attachments directories were filled largeattachments

smenard