Microsoft Exchange 2000 Attachment Handling Patch

Resolve problems found in the Exchange 2000 Web Client.
Download

Microsoft Exchange 2000 Attachment Handling Patch Ranking & Summary

Advertisement

  • Rating:
  • License:
  • Free
  • Publisher Name:
  • Microsoft
  • Publisher web site:
  • http://www.microsoft.com/
  • Operating Systems:
  • Windows 2000
  • File Size:
  • 12.76MB

Microsoft Exchange 2000 Attachment Handling Patch Tags


Microsoft Exchange 2000 Attachment Handling Patch Description

From Microsoft : OWA is a service of Exchange 5.5 and 2000 Server that allows users to use a web browser to access their Exchange mailbox. However, a flaw exists in the interaction between OWA and IE for message attachments. If an attachment contains HTML code including script, the script will be executed when the attachment is opened, regardless of the attachment type. Because OWA requires that scripting be enabled in the zone where the OWA server is located, this script could take action against the user's Exchange mailbox. An attacker could use this flaw to construct an attachment containing malicious script code. The attacker could then send the attachment in a message to the user.


Microsoft Exchange 2000 Attachment Handling Patch Related Software