full-disclosure - outbind in MS outlook

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite for Android: free password hash cracker in your pocket

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

From: staylo at agccs.lmco.com (Stephen Taylor)
Subject: outbind in MS outlook

I am in over my head technically on this. I just want to know if this is
suspicious or normal. In MS Outlook, received unsolicited email that
displayed the following link highlighted within the text of the message:
www.vault.com   source=<a href="www.vault.com">www.vault.com</a><br>

However, when I scroll over it in the preview window, I see this:
outbind://180-000000009E42528C7F33A643A5C67CAF54A413E604377100/www.vault.com

The long string of numbers is from Content.IE5.  Is this some kind of cross
scripting Java manipulation?

ST