EIP-2026-118861
PRE-CVEMicrosoft Outlook Express 4.x/5.x/6.0 - Attachment Processing File Extension Obfuscation
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118861. PoCs published by Benjamin Tobias Franz.
AI-analyzed exploit summary This exploit leverages a file extension obfuscation vulnerability in Microsoft Outlook Express to bypass attachment security warnings. By crafting an EML attachment without a filename, the subject is used as the filename, potentially tricking users into executing malicious code.
Description
Microsoft Outlook Express 4.x/5.x/6.0 - Attachment Processing File Extension Obfuscation
Exploits (1)
This exploit leverages a file extension obfuscation vulnerability in Microsoft Outlook Express to bypass attachment security warnings. By crafting an EML attachment without a filename, the subject is used as the filename, potentially tricking users into executing malicious code.