| ID | 47581 |
| Created | Mar 05, 2019 |
| Updated | Sep 25, 2020 |
| Severity |
|
| CVE ID | |
| Coverage |
IPS (Regular DB)
IPS (Extended DB)
|
| Default Action | drop |
| Active |
|
| Affected OS | Windows |
| Affected App | Other |
Legend
| Active/Available |
|
| InActive/Not Available |
|
Database Update History
| Date | Version | Detail |
|---|---|---|
| 2019-05-23 | 14.619 | Default_action:pass:drop |
| 2019-03-05 | 14.565 |
Refine Search
Threat Encyclopedia
MS.Windows.Contact.File.HTML.Injection
Description
This indicates an attack attempt to exploit a HTML Link Injection vulnerability in Microsoft Windows.
The vulnerability is due to an error when the vulnerable software handles a maliciously crafted .CONTACT File. An attacker can exploit this by tricking an unsuspecting user into visiting a malicious web page and execute arbitrary code within the context of the application.
Affected Products
Microsoft Windows
Impact
System Compromise: Remote attackers can gain control of vulnerable systems.
Recommended Actions
Currently we are not aware of any vendor supplied patch for this issue.
