CVE-2016-3366

The CVE-2016-3366 issue is a spoofing vulnerability in Microsoft Outlook where MIME attachments are not correctly terminated per RFC 2046, allowing crafted attachments to bypass antivirus/antispam scans. Affected products include Outlook 2007 SP3, 2010 SP2, 2013 SP1 (and RT1), 2016, and Outlook 2...

CVE-2016-3366

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...

Microsoft Exchange Server Information Disclosure Vulnerability (CNVD-2016-07584)

Microsoft Exchange Server is a set of e-mail service programs from Microsoft, which provides e-mail access, storage, forwarding, voice mail, e-mail filtering and screening. An information disclosure vulnerability exists in Microsoft Exchange Server. An attacker could exploit this vulnerability by...

Microsoft Office Spoofing Vulnerability

Microsoft Office is an office software suite of products developed by the U.S. company Microsoft Microsoft. Commonly used components are Word, Excel, Access, Powerpoint, FrontPage and so on. A spoofing vulnerability exists in Microsoft Office that stems from Microsoft Outlook's failure to strictl...

MS16-107: Security Update for Microsoft Office (3185852)

The Microsoft Office application installed on the remote Windows host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists in the the Click-to-Run C2R components due to improper handling of objects in memory. An...

Microsoft Exchange Server Multiple Vulnerabilities (3185883)

This host is missing an important security update according to Microsoft Bulletin MS16-108. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Exchange Server Information Disclosure Vulnerabilities (3185883)

This host is missing an important security update according to Microsoft Bulletin MS16-108. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

Microsoft Office Outlook Remote Code Execution Vulnerability (3185852)

This host is missing a critical security update according to Microsoft Bulletin MS16-107. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-107: Description of the security update for Outlook 2013: September 13, 2016

MS16-107: Description of the security update for Outlook 2013: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

Microsoft Exchange Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in the way that Microsoft Outlook handles meeting invitation requests. To exploit the vulnerability, an attacker could send a specially crafted Outlook meeting invitation request with malicious cross-site scripting XSS capability to a user. The updat...

Microsoft Office Information Disclosure Vulnerability

An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails. The attacker would have to u...

Microsoft Outlook Spoofing Vulnerability

A spoofing vulnerability exists when Microsoft Outlook does not strictly adhere to RFC2046, and improperly identifies the end of a MIME attachment. An improper MIME attachment ending may cause antivirus or antispam scanning to not work as intended. To exploit the vulnerability, an attacker could...

MS16-107: Description of the security update for Outlook 2010: September 13, 2016

MS16-107: Description of the security update for Outlook 2010: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

MS16-107: Description of the security update for Outlook 2007: September 13, 2016

MS16-107: Description of the security update for Outlook 2007: September 13, 2016 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see...

MS16-107: Description of the security update for Outlook 2016: September 13, 2016

None None...

Microsoft Office CVE-2016-3366 Spoofing Vulnerability

Description Microsoft Office is prone to a security vulnerability that may allow attackers to conduct spoofing attacks. An attacker can exploit this issue to perform unauthorized actions; other attacks are also possible. Technologies Affected Microsoft Outlook 2007 Microsoft Outlook 2010 32-bit...

Vulnerability of the Windows operating system, allowing a perpetrator to compromise accounts

The vulnerability of the ActiveSyncProvider library in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to gain access to accounts by exploiting a flaw in Universal Outlook to establish a secure connection...

The vulnerability of the Microsoft Outlook email client, which allows a hacker to execute arbitrary code.

The vulnerability of the Microsoft Outlook email client arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted Office document from a remote location...

Microsoft ActiveSyncProvider Universal Outlook Information Disclosure Vulnerability (3182332)

This host is missing an important security update according to Microsoft Bulletin MS16-103. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Universal Outlook Information Disclosure Vulnerability

Microsoft Windows is the popular computer operating system. Universal Outlook is vulnerable to an information disclosure vulnerability if the establishment of a secure connection fails. An attacker could exploit this vulnerability to obtain username and password information...