CVE-1999-1017

CVE-1999-1017 describes a critical vulnerability in Seattle Labs Emurl 2.0 and earlier versions, where the email client stores attachments in a directory with scripting enabled. This design flaw allows a malicious ASP file attachment to execute automatically when the recipient opens the email, potentially leading to compromise. With a CVSS score of 7.5 (HIGH), this vulnerability is easily exploitable over the network with low attack complexity, enabling an attacker to achieve partial confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.