CVE-2010-0266

Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PRATTACHMETHOD property value of ATTACHBYREFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachme...

Microsoft Outlook SMB Attachment Remote Code Execution Vulnerability (978212)

This host is missing a critical security update according to Microsoft Bulletin MS10-045. OpenVAS Vulnerability Test $Id: secpodms10-045.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Outlook SMB Attachment Remote Code Execution Vulnerability 978212 Authors: Antu Sanadi Copyright: Copyright ...

Microsoft Security Bulletin MS10-045 - Important Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

Microsoft Security Bulletin MS10-045 - Important Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution 978212 Published: July 13, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. The vulnerability could...

Microsoft Outlook SMB Attachment Remote Code Execution Vulnerability (978212)

This host is missing a critical security update according to Microsoft Bulletin MS10-045. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Office Outlook 2007 (KB980376)

A security vulnerability exists in Microsoft Office Outlook 2007 that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability...

Microsoft Outlook TNEF Stream With MAPI Attachment Remote Code Execution Vulnerability

Description Microsoft Outlook is prone to a remote code-execution vulnerability because it fails to properly verify attachments. Attackers can exploit this issue by enticing an unsuspecting user into opening a specially crafted email attachment. Successfully exploiting this issue will allow an...

Microsoft Outlook AttachMethods Remote Code Execution (MS10-045; CVE-2010-0266)

Microsoft Outlook is an e-mail application and a personal information manager. A remote code execution vulnerability has been reported in the way that Microsoft Office Outlook tries to verify attachments in a specially crafted e-mail message. The vulnerability is due to an error in Microsoft Offi...

MS10-045: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

The Outlook component of Microsoft Office has a remote code execution vulnerability. Opening an attachment in a specially crafted email can result in arbitrary code execution. A remote attacker could exploit this by sending a user an email and tricking them into opening a malicious attachment,...

Outlook Web Access 2007 - Cross-Site Request Forgery

Outlook Web Access 2007 - Cross-Site Request Forgery Source: http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails Demo: http://www.youtube.com/watch?v=Bx-zfu0uXYg After Nduja Connection worm and the Memova issue, it's now time to shed a light on vulnerabilities affecting corporat...

Microsoft Exchange and Outlook TNEF Decoding Integer Overflow (CVE-2006-0002)

A buffer overflow vulnerability exists in the way Microsoft Exchange and Microsoft Outlook process TNEF encoded messages. When the TNEF decoder used by these products processes a TNEF object record with a large size value, an integer overflow can occur. An attacker potentially can exploit this...

DoS attacks on email clients via protocol handlers

Hello 3APA3A! I want to warn you about security vulnerabilities in email clients, particularly in Outlook Express and Outlook. This advisory is concerned with my series of advisories about vulnerabilities in browsers, which belong to group of DoS via protocol handlers. ---------------------------...

Outlook ATTACH_BY_REF_RESOLVE File Execution

It has been discovered that certain e-mail message cause Outlook to create Windows shortcut-like attachments or messages within Outlook. Through specially crafted TNEF streams with certain MAPI attachment properties, it is possible to set a path name to files to be executed. When a user double...

Outlook ATTACH_BY_REF_ONLY File Execution

It has been discovered that certain e-mail message cause Outlook to create Windows shortcut-like attachments or messages within Outlook. Through specially crafted TNEF streams with certain MAPI attachment properties, it is possible to set a path name to files to be executed. When a user double...

CVE-2010-2091

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

Cross site scripting

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

CVE-2010-2091

Microsoft Outlook Web Access (OWA) 8.2.254.0, when used with Internet Explorer 7 on Windows Server 2003, is vulnerable to issues with the id parameter in a Folder IPF.Note action to the default URI. This may allow remote attackers to obtain sensitive information or perform cross-site scripting (X...

CVE-2010-2091

Microsoft Outlook Web Access OWA 8.2.254.0, when Internet Explorer 7 on Windows Server 2003 is used, does not properly handle the id parameter in a Folder IPF.Note action to the default URI, which might allow remote attackers to obtain sensitive information or conduct cross-site scripting XSS...

Microsoft Outlook Web Access (OWA) version 8.2.254.0 information disclosure vulnerability

No description provided by source. $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "Microsoft Outlook Web Access OWA version 8.2.254.0" OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information disclosure vulnerability in "Microsoft...

Microsoft Outlook Web Access (OWA) 8.2.254.0 - Information Disclosure

Microsoft Outlook Web Access OWA 8.2.254.0 - Information Disclosure $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "Microsoft Outlook Web Access OWA version 8.2.254.0" OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information...

Microsoft Outlook Web Access (OWA) 8.2.254.0 - Information Disclosure

$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ "Microsoft Outlook Web Access OWA version 8.2.254.0" OS: Windows Server 2003 Internet Explorer 7 $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ There is an information disclosure vulnerability in "Microsoft Outlook Web Access OWA version...