CVE:CVE-2007-4040
CNNVD:CNNVD-200707-500
涉及Microsoft Outlook和Outlook Express的自变量注入漏洞,当某些URIs被注册时,远程攻击者可以借助一个未明URI中的外科元字符，执行跨浏览器脚步攻击并执行任意指令。该漏洞与CVE-2007-3670相似。
solution:Upgrade microsoft outlook to a higher version than *; Upgrade microsoft outlook_express to a higher version than *