Cyrusoft Information for VU#980499
Certain MIME types can cause Internet Explorer to execute arbitrary code when rendering HTML
- Vendor Information Help Date Notified: 30 Mar 2001
- Statement Date:
- Date Updated: 30 Mar 2001
Mulberry does not use Internet Explorer to render HTML within Mulberry
itself and is not vulnerable to these kinds of problems. Users can save
HTML attachments to disk and then view those in browsers susceptible to
this problem, but this requires the direct intervention of the user to
explicitly save to disk - simply viewing HTML in Mulberry does not expose
users to these kinds of problems.
Our HTML rendering is a basic styled-text only renderer that does not
execute any form of scripts. This is true on all the platforms we support:
Win32, Mac OS (Classic & X), Solaris, linux.
An official statement about this is available on our website at:
The vendor has not provided us with any further information regarding this vulnerability.
The CERT/CC has no additional comments at this time.