FYI...
- http://isc.sans.org/diary.html?storyid=1940
Last Updated: 2007-03-24 20:16:16 UTC ...(Version: 32)
Added today:
- http://nvd.nist.gov/nvd.cfm?cvename=CVE-2007-1658
Original release date: 3/24/2007
Source: US-CERT/NIST ...
"Overview:
Windows Mail in Microsoft Windows Vista might allow user-assisted remote attackers to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demonstrated using C:/windows/system32/winrm (winrm.cmd) and migwiz (migwiz.exe)..."