Microsoft Outlook Express - NNTP Response Parsing Buffer Overflow (MS05-030) (Metasploit)

$Id: ms05030nntp.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

WorkgroupShare Detection

This host is running a WorkgroupShare Server. WorkgroupShare lets the people share their personal Outlook folders, such as calendar, contact, task and notes information by using standard internet protocols. OpenVAS Vulnerability Test $Id: gbworkgroupsharedetect.nasl 5388 2017-02-21 15:13:30Z teis...

Security Update for Microsoft Office Outlook 2003 (KB973705)

A security vulnerability exists in Microsoft Office Outlook 2003 that could allow arbitrary code to run when a maliciously modified web page is opened. This update resolves that vulnerability...

Microsoft Outlook 2002 Script Execution (CVE-2004-0121)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...

Outlook Web Access (OWA) allows direct access to files blocked by policy

No description provided by source. This trick is mostly useful but can also be used for wrong purposes. Since it is so simple, it’s probably already known for some people. If someone sends you a file through OWA but the file is blocked by a policy, this is what you can do: 1-Install firefox...

Outlook Web Access Attachment Access

This trick is mostly useful but can also be used for wrong purposes. Since it is so simple, it’s probably already known for some people. If someone sends you a file through OWA but the file is blocked by a policy, this is what you can do: 1-Install firefox 2-Access your email and attachment with...

Outlook Express and Windows Mail NNTP Handling Code Execution (MS07-056; CVE-2007-3897)

Network News Transfer Protocol NNTP is an open standard designed for the distribution, enquiry, retrieval, and posting of news articles using a reliable stream-based transmission over the Internet. It is the core protocol of the newsgroup service. The most commonly used communication end point fo...

Microsoft Outlook Express NNTP Response Parsing Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ class Metasploit3 'Microsoft Outlook Express NNTP...

Windows ANI LoadAniIcon() Chunk Size Stack Overflow (SMTP)

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Windows ANI...

MS Outlook iCal Meeting Request VEVENT Record Memory Corruption (MS07-003; CVE-2007-0033)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Microsoft Outlook product is an implementation of an email client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...

Microsoft Exchange Server Outlook Web Access Script Injection (MS06-029; CVE-2006-1193)

Microsoft provides server and client side implementations of email protocols such as SMTP, POP3 and IMAP. The widely used Exchange Server product is an implementation of an email server capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and...

On the Outlook Web Access Attacks, Adobe and Microsoft Patch Releases

In this episode, Ryan and Dennis discuss the Outlook Web Access phishing attacks, the huge Microsoft and Adobe patch releases and the massive scope of the botnet problem. Download SHOW NOTES: Zeus Trojan Part of New Outlook Web Access Phishing Scam Microsoft Ships Largest Batch of Security Patche...

Outlook Web Access Attack Using Pushdo Botnet

Here are some technical details on the Outlook Web Access phishing scheme. 1. The Spam According to our preliminary research, the spam emails which attacked OWA users, including Kaspersky, were sent using the pushdo botnet – which is based on malware from the Backdoor.Win32.NewRes family. These...

Zeus Trojan Part of New Outlook Web Access Phishing Scam

The attackers behind the Zeus Trojan have unleashed a new phishing scam that is specifically targeted at users of the popular corporate webmail tool Outlook Web Access. The phishing emails include the recipient’s actual email address and appear to be an update to the OWA application. The mail...

MS ATL ActiveX Controls for MS Office Could Allow Remote Code Execution (973965)

This host is missing a critical security update according to Microsoft Bulletin MS09-060. OpenVAS Vulnerability Test $Id: secpodms09-060.nasl 6533 2017-07-05 08:41:34Z santu $ MS ATL ActiveX Controls for MS Office Could Allow Remote Code Execution 973965 Authors: Antu Sanadi Updated By: Antu Sana...

Microsoft ATL ActiveX Controls for MS Office Could Allow Remote Code Execution (973965)

This host is missing a critical security update according to Microsoft Bulletin MS09-060. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

Security Update for Microsoft Outlook 2002 (KB973702)

A security vulnerability exists in Microsoft Outlook 2002 that could allow arbitrary code to run when a maliciously modified web page is opened. This update resolves that vulnerability...

Microsoft Outlook View ActiveX Controls Remote Code Execution (MS09-055; CVE-2009-2493)

ActiveX controls are reusable software components based on Microsoft Component Object Model COM. A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in several Microsoft Outlook View ActiveX controls. To trigger this issue, ...

yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities

------------------------------------------------------------------------ yTNEF/Evolution TNEF Attachment decoder plugin directory traversal & buffer overflow vulnerabilities ------------------------------------------------------------------------ Yorick Koster, June 2009...

Vulnerabilities in Microsoft ATL Could Allow Remote Code Execution (973908)

This host is missing a critical security update according to Microsoft Bulletin MS09-037. OpenVAS Vulnerability Test $Id: secpodms09-037.nasl 5363 2017-02-20 13:07:22Z cfi $ Vulnerabilities in Microsoft ATL Could Allow Remote Code Execution 973908 Authors: Antu Sanadi Updated By: Madhuri D on...