CVE-2001-0999 Information

Description

Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain contrary to the expected behavior that text/plain messages will not run script.

Reference

http://www.securityfocus.com/archive/1/213754 http://www.securityfocus.com/archive/1/214453 http://www.securityfocus.com/bid/3334 https://exchange.xforce.ibmcloud.com/vulnerabilities/7118