Re: MS Outlook/Outlook Express Preview Pane Security Issue

["Nexus" <nexus () patrol i-way co uk>]

----- Original Message ----- 
From: "Jeff Uslan" <jeff_uslan () speakeasy net>

[snip]

> Just a reminder that if you are using anything but Outlook 2003.  The HTML
> injection issues and other such exploits with just viewing the preview pane
> have mostly been taken care of in the older versions but issues are still
> popping up.  If you want to use the preview pane I would recommend Outlook
> 2003 it has a greater security model and the preview pane will not execute
> any HTML code or download any HTML embedded pictures unless you actually
> tell it to on an e-mail by e-mail basis.

[snip]

By "anything but Outlook 2003" I assume you also mean Outlook Express; as
(IIRC) since IE6 SP1, it's as simple as Tools->Options->Read and check the
"Read all messages in plain text" box as this will also prevent any web bugs
and other HTML nonsense, regardless of how you view it.   Granted that you
don't get to enjoy the shi^H^H^H wonderful experience that is HTML email,
but I can live with that ;-)

Cheers.