IncrediMail Ltd. IncrediMail Known Attachment Location Vulnerability

Incredimail is an email client for Microsoft Windows based systems. It includes support for a wide range of rich, multimedia features such as sound, animations and backgrounds in email.

A weakness has been discovered in some versions of Incredimail. When email is received including a file attachment, the file is automatically stored in a predictable location on the local system. An attacker may be able to use this knowledge to launch further attacks against the vulnerable system.


 

Privacy Statement
Copyright 2010, SecurityFocus