3820 matches found
Microsoft Outlook高级查找功能远程代码执行漏洞（MS07-003）
Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook在处理畸形的.oss（Office Saved Searches）文件时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 攻击者可能通过诱骗用户打开畸形.oss文件利用此漏洞。如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Outlook 2003 Microsoft...
Microsoft Outlook邮件头解析远程拒绝服务漏洞（MS07-003）
Microsoft Outlook是Office套件所捆绑的邮件客户端。 Outlook处理电子邮件标题信息的方式漏洞，远程攻击者可以导致用户的Outlook客户端失效。 远程攻击者可以向Outlook用户发送畸形的电子邮件，某些情况下这会导致Outlook客户端失效。只要畸形电子邮件驻留在电子邮件服务器上，Outlook客户端将继续失效。该电子邮件可由电子邮件管理员或用户通过其他电子邮件客户端（如Outlook Web Access或Outlook Express）删除，删除之后Outlook客户端将恢复正常工作。 Microsoft Outlook 2003 Microsoft...
Microsoft Outlook VEVENT记录远程代码执行漏洞（MS07-003）
Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook在处理畸形VEVENT记录时存在漏洞，远程攻击者可能利用此漏洞控制用户机器。 攻击可以通过处理包含畸形VEVENT记录的.ics（iCal）文件来利用此漏洞，如果用户使用管理用户权限登录，成功利用此漏洞的攻击者便可完全控制受影响的系统。攻击者可随后安装程序；查看、更改或删除数据；或者创建拥有完全用户权限的新帐户。那些帐户被配置为拥有较少系统用户权限的用户比具有管理用户权限的用户受到的影响要小。 Microsoft Outlook 2003 Microsoft Outlook 200...
Microsoft Outlook vulnerable to DoS via a malformed email message
Overview There is a vulnerability in the way Microsoft Outlook handles malformed email messages that may allow a remote, unauthenticated attacker to cause a denial of service. Description Microsoft Outlook contains a vulnerability in the way that it handles certain email message headers. Accordin...
[Full-disclosure] Computer Terrorism (UK) :: Incident Response Centre - Microsoft Outlook Vulnerability
Computer Terrorism UK :: Incident Response Centre www.computerterrorism.com Security Advisory: CT09-01-2007 ======================================================= Microsoft Outlook Advanced Find - Remote Code Execution ======================================================= Advisory Date: 11th...
Multiple Microsoft Outlook security vulnerabilities
DoS. Buffer overflow on .iCal and .oss files parsing...
Design/Logic Flaw
Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...
CVE-2007-0033
Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...
Buffer overflow
Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...
CVE-2007-0034
Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...
CVE-2007-0034
Buffer overflow in the Advanced Search Finder.exe feature of Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to execute arbitrary code via a crafted Outlook Saved Searches OSS file that triggers memory corruption, aka "Microsoft Outlook Advanced Find Vulnerability."...
CVE-2007-0033
CVE-2007-0033 is a memory corruption/remote code execution vulnerability in Microsoft Outlook 2002 and 2003 triggered by parsing a malformed VEVENT record in an iCalendar (.ics) file or meeting request. The flaw arises from inadequate validation when processing VEVENT data, enabling a user-assist...
CVE-2007-0034
CVE-2007-0034 is a buffer overflow in Microsoft Outlook’s Advanced Find (Office Saved Searches .oss) parsing for Outlook 2000/2002/2003. The vulnerability arises when Outlook processes a specially crafted .oss file, potentially allowing remote code execution with the permissions of the logged-on ...
CVE-2007-0033
Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file...
CVE-2006-1305
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service memory exhaustion and interrupted mail recovery via malformed e-mail header information, possibly related to 1 long subject lines or 2 large numbers of recipients in To or CC headers...
CVE-2006-1305
CVE-2006-1305 affects Microsoft Outlook 2000, 2002, and 2003. The vulnerability is a denial-of-service caused by how Outlook processes malformed e-mail header information (e.g., long subject lines or many recipients in To/CC), leading to memory exhaustion and interrupted mail recovery. CERT/NVD e...
Security Update for Outlook 2002 (KB921594)
This update resolves a security vulnerability in Microsoft Outlook 2002 that could enable a remote user to execute code on a computer that is running Outlook 2002...
MS07-003: Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution (925938)
The remote host is running a version of outlook or exchange that is vulnerable to a bug in the VEVENT record handling routine that could allow an attacker execute arbitrary code on the remote host by sending a specially crafted email. Tenable Network Security, Inc. include"compat.inc"; if...
Microsoft Outlook Malformed Email Header Remote Denial of Service Vulnerability
Description Microsoft Outlook is prone to a remote denial-of-service vulnerability because the application fails to properly handle malformed email messages. A remote attacker can exploit this issue to crash affected email clients. This issue will persist as long as the email message resides on t...
Microsoft Outlook Advanced Find Remote Code Execution Vulnerability
Description Microsoft Outlook is prone to a remote code-execution vulnerability because the application fails to properly handle malformed saved search files. A remote attacker can exploit this issue to execute arbitrary code with the privileges of unsuspecting users. A successful exploit may aid...