CVE Vulnerabilities

CVE-2003-0241

Published: Jun 09, 2003 | Modified: Sep 05, 2008
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

FrontRange GoldMine mail agent 5.70 and 6.00 before 30503 directly sends HTML to the default browser without setting its security zone or otherwise labeling it untrusted, which allows remote attackers to execute arbitrary code via a message that is rendered in IE using a less secure zone.

Affected Software

Name Vendor Start Version End Version
Goldmine Frontrange 5.70 (including) 5.70 (including)
Goldmine Frontrange 6.00 (including) 6.00 (including)

References