Vulnerability Development mailing list archives

Re: BUGLOOK: Outlook Express 6.00 + MS Exchange Server version 5.5


From: "http-equiv () excite com" <http-equiv () excite com>
Date: Wed, 5 Dec 2001 19:21:29 -0800 (PST)

 For some odd reason, Outlook Express couples the original subject in 
 thereceived mail message to your first sentence in your reply: 
 
 Subject: Let's Go Get Stoned 
 
 Reply with your first sentence: 
 
 Let's Go Get Stonedyou sure? 
 
 These are default settings for both Outlook Express 6.00 ['reply to
message
 using the format in which they were sent'] and both Outlook and
 OutlookExpress 'send' is set to HTML format out of the box. 

Nothing like a millionth look. It is the title tag that is being carried
over:

When Outlook [or is it the X-Mailer: Internet Mail Service (5.5.2653.19)--
whatever that is] creates an html mail message, the sender inputs the
subject which is for some reason created as the title in the body of the
html message:

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=windows-1252">
<META NAME="Generator" CONTENT="MS Exchange Server version 5.5.2653.12">
<TITLE>Let's Go Get Stoned</TITLE>

When the reply or forward is hit by the recipient, the title tags including
the original subject contained with in it, are retained by Outlook Express.
Then when you set format::plain text, the original subject or title is still
retained but unseen [outlook express composes mail message under composition
in html regardless of setting -- only after sending does it apply apply
plain text or retain html], so once sent, the retained original title or
subject, is then revealed as plain text on the other side along with the
body of your message.

What a remarkable cont[c]raption !

---
http://www.malware.com





______________________________________________________________________________
Send a friend your Buddy Card and stay in contact always with Excite Messenger
http://messenger.excite.com



Current thread: