CVE-2006-2111: microsoft outlook_express
Vulnerability summary
CVE-2006-2111 is a medium (CVSS 4.3) vulnerability in microsoft outlook_express. EPSS estimates a 40.63% chance of exploitation in the next 30 days, higher than 98.6% of scored vulnerabilities. 4 public exploits are recorded.
Timeline
- 01-05-2006PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability."
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
40.63%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
+0.32 pp
From 40.31% on 20-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
4 foundExploit Reference (secunia.com)
Maturity: unknown
Exploit Reference (secunia.com)
Maturity: unknown
Exploit Reference (securitytracker.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
Microsoft1 product
1 vendor · 1 product
References
16 links- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1605VDB EntrySignatureX Refsource OVAL
- secunia.com/Internet_Explorer_Arbitrary_Content_Disclosure_Vulnerability_Test/X Refsource MISCExploitVendor Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-034Vendor AdvisoryX Refsource MS
Show all 16 references
- www.us-cert.gov/cas/techalerts/TA07-163A.htmlThird Party AdvisoryX Refsource CERTUS Government Resource