Microsoft MHTML Security Advisory Released

1 min. read

Published on January 28, 2011

published on January 28, 2011

Readers help support Windows Report. We may get a commission if you buy through our links.

Microsoft has released a new security advisory dealing with an information disclosure vulnerability in the MHTML (MIME Encapsulation of Aggregate HTML) protocol handler:

The impact of an attack on the vulnerability would be similar to that of server-side cross-site-scripting (XSS) vulnerabilities. For instance, an attacker could construct an HTML link designed to trigger a malicious script and somehow convince the targeted user to click it. When the user clicked that link, the malicious script would run on the user’s computer for the rest of the current Internet Explorer session. Such a script might collect user information (eg., email), spoof content displayed in the browser, or otherwise interfere with the user’s experience.

Further details can be found at Microsoft TechNet Security Advisories.

Microsoft Security Response Center

Radu Tyrsina

Radu Tyrsina has been a Windows fan ever since he got his first PC, a Pentium III (a monster at that time). For most of the kids of his age, the Internet was an amazing way to play and communicate with others, but he was deeply impressed by the flow of information and how easily you can find anything on the web. Prior to founding Windows Report, this particular curiosity about digital content enabled him to grow a number of sites that helped hundreds of millions reach faster the answer they're looking for.