HTML Rendering Vulnerability in FrontRange GoldMine Mail Agent

HTML Rendering Vulnerability in FrontRange GoldMine Mail Agent

CVE-2003-0241 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.

Learn more about our Web Application Penetration Testing UK.