MS15-116: Description of the security update for Office 2016 for Mac: November 10, 2015

None None...

Microsoft Outlook for Mac Spoofing (MS15-116: CVE-2015-6123)

A spoofing vulnerability has been reported in Microsoft outlook for Mac. The vulnerability is due to an error in Microsoft Office Outlook that fail to sanitize html input or treat it in a safe manner. A remote attacker can exploit this vulnerability by sending HTML e-mails to victims with content...

Outlook in classic authentication engine security vulnerabilities, has been the reward of the discoverer 2. 5 million dollars-vulnerability warning-the black bar safety net

Synack, a senior security researcher Wesley Wineberg has received a Microsoft award 2 5 0 0 0$, which is to reward him to Microsoft to report a bug, this is a CSRF vulnerability that can hijack any Hotmail account. CSRF（cross-site request forgery）vulnerability means that any access to the malicio...

MS15-110: Description of the security update for Office 2016 for Mac: October 13, 2015

None None...

Microsoft Exchange Information Disclosure

Credits: hyp3rlinx + Website: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-MS-EXCHANGE-INFO-DISCLOSURE.txt Vendor: ================================ www.microsoft.com Product: ================================ Microsoft Exchange Outlook Web Vulnerability Type:...

Microsoft Pays $24,000 Bounty to Hacker for Finding 'Account Hacking' Technique

A security researcher has won $24,000 from Microsoft for finding a critical flaw in its Live.com authentication system that could allow hackers to gain access to a user’s complete Outlook account or other Microsoft services. Microsoft's Live.com is the authentication system that everyone go throu...

Outlook Web Access Targeted Attack

Attackers aiming for lateral movement inside an enterprise network have done well in the past to target domain controller credentials. Researchers at Cybereason, however, have uncovered a targeted attack in which hackers were able to burrow onto the corporate network and steal thousands of...

New Attack Targeting Microsoft Outlook Web App (OWA) to Steal Email Passwords

Researchers have unearthed a dangerous backdoor in Microsoft's Outlook Web Application OWA that has allowed hackers to steal e-mail authentication credentials from major organizations. The Microsoft Outlook Web Application or OWA is an Internet-facing webmail server that is being deployed in...

The vulnerability of the Microsoft Exchange Server system’s automation mechanism allows a perpetrator to gain access to protected information.

The vulnerability of the Outlook Web Access component of the Microsoft Exchange Server automation system is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information through a...

The vulnerability of the Microsoft Exchange Server system’s automation mechanism allows a hacker to inject arbitrary web or HTML code.

The vulnerability of the Outlook Web Access component of the Microsoft Exchange Server automation system exists due to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to inject arbitrary web or HTML code through a special...

Microsoft Outlook RTF Embedded Object Security Bypass (CVE-2004-0503)

A security bypass vulnerability exists in Microsoft Outlook. The vulnerability is due to a lack of validation for certain OLE objects attached to RTF messages. A successful exploitation may lead to unprompted installation of an executable when exploited in conjunction with predictable-file-locati...

Microsoft Exchange Server 中的漏洞可能允许信息泄漏 (MS15-103)

漏洞描述：Microsoft Exchange Server 是个消息与协作系统。Exchange server可以被用来构架应用于企业、学校的邮件系统或免费邮件系统。它还是一个协作平台。你可以在此基础上开发工作流，知识管理系统，Web系统或者是其他消息系统。 Microsoft Exchange Server 中存在多个漏洞。 Outlook Web Access OWA 未正确处理 Web 请求和清理用户输入和电子邮件内容，最严重的漏洞可能允许信息泄漏。漏洞影响：microsoft:exchangeserver:2013:cumulativeupdate8...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2015-05967)

Microsoft Exchange Server is a suite of e-mail service components from Microsoft. A cross-site scripting vulnerability exists in Microsoft Exchange Server 2013 Cumulative Update 8/9/SP1, Outlook Web Access OWA, which can be exploited by remote attackers to inject arbitrary web script or HTML via ...

MS15-103: Vulnerabilities in Microsoft Exchange Server Could Allow Information Disclosure (3089250)

The remote Microsoft Exchange server is missing a security update. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability exists Outlook Web Access OWA due to improper handling of web requests. An unauthenticated, remote attacker can exploit this, via a...

Microsoft Exchange Server Information Disclosure Vulnerability

Microsoft Exchange Server is a set of e-mail service programs from the American company Microsoft Microsoft. An information disclosure vulnerability exists when OWA in Microsoft Exchange Server fails to properly process Web requests. An attacker can exploit the vulnerability to discover the stack...

Microsoft Exchange Server Cross-Site Scripting Vulnerability (CNVD-2015-05966)

Microsoft Exchange Server is a suite of e-mail service components from Microsoft. A cross-site scripting vulnerability exists in Microsoft Exchange Server 2013 Cumulative Update 8/9/SP1, Outlook Web Access OWA, which can be exploited by remote attackers to inject arbitrary web script or HTML via ...

CVE-2015-2544

Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."...

CVE-2015-2543

Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."...

CVE-2015-2505

Outlook Web Access OWA in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 and SP1 allows remote attackers to obtain sensitive stacktrace information via a crafted request, aka "Exchange Information Disclosure Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Outlook Web Access OWA in Microsoft Exchange Server 2013 Cumulative Update 8 and 9 allows remote attackers to inject arbitrary web script or HTML via a crafted e-mail message, aka "Exchange Spoofing Vulnerability."...