Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "_top".
No PoCs from references.
- https://github.com/GuiMatosInfra/explorer2sectool
- https://github.com/xaitax/SploitScan