EIP-2026-118865
PRE-CVEMicrosoft Outlook Express 6 - '.XML' File Attachment Script Execution
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-118865. PoCs published by http-equiv.
AI-analyzed exploit summary This exploit leverages a vulnerability in Microsoft Outlook Express where embedded XSL script code in an XML file can execute arbitrary code in the Local System security zone. The PoC demonstrates how script code can determine the Temporary Internet File directory location, leading to potential code execution.
Description
Microsoft Outlook Express 6 - '.XML' File Attachment Script Execution
Exploits (1)
This exploit leverages a vulnerability in Microsoft Outlook Express where embedded XSL script code in an XML file can execute arbitrary code in the Local System security zone. The PoC demonstrates how script code can determine the Temporary Internet File directory location, leading to potential code execution.