Microsoft Outlook - 'ATTACH_BY_REF_RESOLVE' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefresolve.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Outlook - 'ATTACH_BY_REF_ONLY' File Execution (MS10-045) (Metasploit)

$Id: ms10045outlookrefonly.rb 10389 2010-09-20 04:38:13Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Microsoft Windows - ANI LoadAniIcon() Chunk Size Stack Buffer Overflow (SMTP) (MS07-017) (Metasploit)

$Id: ms07017aniloadimagechunksize.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

MS KB2401593: Microsoft Outlook Web Access (OWA) CSRF

The remote host is running a version of Outlook Web Access OWA for Exchange Server that is affected by a cross-site request forgery vulnerability. By tricking an authenticated user to click on a link to a specially crafted web page, it may be possible for an attacker to perform unauthorized actio...

Microsoft Office multiple security vulnerabilities

Buffer overflow in Microsoft Outlook message parsing, memory corruption on fonts parsing...

Secunia Research: Microsoft Outlook Content Parsing Integer Underflow Vulnerability

====================================================================== Secunia Research 14/09/2010 - Microsoft Outlook Content Parsing Integer Underflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2010-2728

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."...

Heap overflow

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."...

CVE-2010-2728

CVE-2010-2728 is a heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2 that occurs when Online Mode for an Exchange Server is enabled. A crafted e-mail message can lead to remote code execution. Public sources (MS10-064) confirm the vulnerability and provide the secur...

CVE-2010-2728

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."...

Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)

This host is missing a critical security update according to Microsoft Bulletin MS10-064. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)

This host is missing a critical security update according to Microsoft Bulletin MS10-064. OpenVAS Vulnerability Test $Id: secpodms10-064.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Outlook TNEF Remote Code Execution Vulnerability 2315011 Authors: Antu Sanadi Copyright: Copyright c 2010...

Microsoft Security Bulletin MS10-064 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2315011)

Microsoft Security Bulletin MS10-064 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution 2315011 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. The vulnerability could...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...

Microsoft Outlook RTF Email Parsing Heap Based Buffer Overflow (MS10-064; CVE-2010-2728)

Microsoft Outlook is an e-mail application and a personal information manager. A remote code execution vulnerability has been reported in the way that Microsoft Outlook parses content in a specially crafted e-mail message. The vulnerability is due to an error in Microsoft Outlook that fails to...

MS10-064: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

The Outlook component of Microsoft Office has a remote code execution vulnerability. It is possible for a remote attacker to execute arbitrary code if a user opens or previews a specially crafted email in an affected version of Outlook that is connected to an Exchange server with Online Mode. C...

Microsoft Outlook 'Online Mode' Remote Heap Buffer Overflow Vulnerability

Description Microsoft Outlook is prone to a remote heap-based buffer-overflow vulnerability because it fails to properly validate user-supplied data. Attackers can exploit this issue by enticing an unsuspecting user to preview or view a crafted email message. Successfully exploiting this issue wi...

CVE-2010-3213

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

Cross site request forgery (csrf)

Cross-site request forgery CSRF vulnerability in Microsoft Outlook Web Access owa/ev.owa 2007 through SP2 allows remote attackers to hijack the authentication of e-mail users for requests that perform Outlook requests, as demonstrated by setting the auto-forward rule...

CVE-2010-3213

CVE-2010-3213 is a CSRF in Microsoft Outlook Web Access (OWA) for Exchange Server 2007–SP2. The vulnerability allows an authenticated user to be tricked into performing Outlook actions (e.g., creating or modifying outbound rules) via forged requests, hijacking the user’s session in the OWA contex...