3821 matches found
CVE-2008-0110
Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI...
CVE-2008-0110
Summary of CVE-2008-0110 (MS Outlook mailto URI handling): A vulnerability in Microsoft Outlook (Office 2000 SP3, XP SP3, 2003 SP2/SP3, and 2007) arises from improper validation of mailto URIs passed from a web browser, enabling a remote attacker to execute arbitrary code and take complete contro...
CVE-2008-0110
Unspecified vulnerability in Microsoft Outlook in Office 2000 SP3, XP SP3, 2003 SP2 and Sp3, and Office System allows user-assisted remote attackers to execute arbitrary code via a crafted mailto URI...
Security Update for Microsoft Office Outlook 2007 (KB946983)
A security vulnerability exists in Microsoft Office Outlook 2007 that could allow arbitrary code to run when you click on a maliciously modified hyperlink. This update resolves that vulnerability...
Security Update for Microsoft Outlook 2002 (KB946985)
A security vulnerability exists in Microsoft Outlook 2002 that could allow arbitrary code to run when you click on a maliciously modified hyperlink. This update resolves that vulnerability...
Security Update for Microsoft Office Outlook 2003 (KB945432)
A security vulnerability exists in Microsoft Office Outlook 2003 that could allow arbitrary code to run when you click on a maliciously modified hyperlink. This update resolves that vulnerability...
MS08-015: Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (949031)
The remote host is running a version of outlook or exchange that is vulnerable to a bug when processing a specially malformed URI mailto link, which can let an attacker execute arbitrary code on the remote host by sending a specially crafted email. Tenable Network Security, Inc...
Microsoft Office mailto URI remote code execution
Overview A vulnerability in the way that Microsoft Outlook handles a certain type of hyperlink could allow a remote attacker to execute arbitrary code on the vulnerable system. Description Microsoft Outlook provides a centralized application for managing and organizing e-mail messages, schedules,...
Microsoft Outlook Remote Code Execution Vulnerability (949031)
Binary data 4421.prm...
Microsoft Outlook Mailto URI Remote Code Execution Vulnerability
Description Microsoft Outlook is prone to a remote code-execution vulnerability because the application fails to adequately validate user-supplied data. Successfully exploiting this issue will allow attackers to execute arbitrary code with the privileges of the currently logged-in user. This will...
Microsoft Office Outlook mailto URI Handling Code Execution (MS08-015; CVE-2008-0110)
Microsoft Office Outlook is a personal information manager that provides an e-mail application, a calendar and task and contact management.A remote code execution vulnerability has been reported in Microsoft Office Outlook. The vulnerability is due to an error in Microsoft Office Outlook that fai...
Microsoft Outlook Express MHTML URL解析信息泄露漏洞（MS07-034）
BUGTRAQ ID: 24392 CVECAN ID: CVE-2007-2225 Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。 Windows的MHTML协议处理器在返回MHTML内容时没有正确的解释HTTP头，这可能允许Internet Explorer绕过域限制。 攻击者可以通过构建特制的网页来利用该漏洞。如果用户使用Internet Explorer查看网页，该漏洞可能允许信息泄露。成功利用此漏洞的攻击者可以读取另一个Internet Explorer域中的数据。 Microsoft Outlook Express 6.0...
Microsoft Outlook Express内容处置解析跨域信息泄露漏洞（MS07-034）
BUGTRAQ ID: 24410 CVECAN ID: CVE-2007-2227 Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。 MHTML协议处理程序将内容处置通知传递回Internet Explorer的方式中存在一个信息泄露漏洞，可能允许攻击者绕过Internet Explorer中的文件下载对话框。 攻击者可以通过构建特制的网页来利用该漏洞。如果用户使用Internet Explorer查看了该网页，漏洞就可能允许信息泄露。成功利用此漏洞的攻击者可以读取另一个Internet Explorer域中的数据。 Microsof...
Microsoft Office不安全文档签名漏洞
Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...
Microsoft Outlook Web Access (OWA) Version Detection
Binary data 4294.prm...
VulnCheck KEV: CVE-2007-3896
The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox,...
CVE-2003-1378
Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the CODEBASE parameter set to the program, a vulnerability similar to CAN-2002-0077...
CVE-2003-1378
Technical details for CVE-2003-1378 are not publicly available in the provided documents. Monitor for updates from vendors and security bulletins for affected products and fixes.
Microsoft Outlook Express和Windows Mail NNTP协议回应数据堆溢出漏洞（MS07-056）
BUGTRAQ ID: 25908 CVECAN ID: CVE-2007-3897 Outlook Express和Windows Mail都是Windows操作系统所捆绑的邮件和新闻组客户端。NNTP（网络新闻传输协议）是用于读取和张贴Usenet文章的协议。 Windows Mail和Outlook Express在处理NNTP回复时存在堆溢出漏洞，恶意NNTP服务器可能利用此漏洞控制用户系统。 如果服务器返回了多于客户端所请求的数据，就可能将攻击者可控的值储存到所分配的内存范围之外，覆盖控制结构，导致执行任意指令。 Microsoft Outlook Express 6.0 SP...
Design/Logic Flaw
The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...