3820 matches found
Microsoft Outlook fails to properly parse Office Saved Searches (.oss) files
Overview A vulnerability exists in the way Microsoft Outlook handles Office Saved Searches .oss. This vulnerability may allow a remote attacker to execute arbitrary code. Description Office Saved Searches .oss contain views of e-mail items that satisfy previous search criteria.Microsoft Outlook...
[Full-disclosure] iDefense Security Advisory 01.09.07: Multiple Microsoft Products VML 'recolorinfo' Element Integer Overflow Vulnerability
Microsoft Windows VML Element Integer Overflow Vulnerability iDefense Security Advisory 01.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Jan 09, 2007 I. BACKGROUND VML is a component of the Extensible Markup Language XML that specifies vector images e.g., rectangles and ovals. This...
Microsoft Outlook VEVENT Record Remote Code Execution Vulnerability
Description Microsoft Outlook is prone to a remote code-execution vulnerability because the application fails to properly handle malformed iCal requests. A remote attacker can exploit this issue to execute arbitrary code with the privileges of unsuspecting users. A successful exploit may aid in t...
Microsoft Security Bulletin MS07-003 Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution (925938)
Microsoft Security Bulletin MS07-003 Vulnerabilities in Microsoft Outlook Could Allow Remote Code Execution 925938 Published: January 9, 2007 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Outlook Impact of Vulnerability: Remote Code Execution Maximum Severity...
Microsoft Outlook fails to properly process a VEVENT record
Overview Microsoft Outlook contains a memory corruption vulnerability that could enable an attacker to execute arbitrary code and gain complete control of the vulnerable system. Description Microsoft Outlook fails to properly handle malformed VEVENT records. When an .iCal meeting request containi...
Design/Logic Flaw
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service memory exhaustion and interrupted mail recovery via malformed e-mail header information, possibly related to 1 long subject lines or 2 large numbers of recipients in To or CC headers...
CVE-2006-1305
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service memory exhaustion and interrupted mail recovery via malformed e-mail header information, possibly related to 1 long subject lines or 2 large numbers of recipients in To or CC headers...
CVE-2006-6659
The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...
CVE-2006-6659
CVE-2006-6659 affects the Microsoft Office Outlook Recipient ActiveX control (ole32.dll) in Windows XP SP2. The vulnerability allows remote attackers to cause a denial of service by presenting crafted HTML, resulting in an Internet Explorer 7 hang. The connected Red Hat and NVD records reiterate ...
CVE-2006-6659
The Microsoft Office Outlook Recipient ActiveX control ole32.dll in Windows XP SP2 allows remote attackers to cause a denial of service Internet Explorer 7 hang via crafted HTML...
MS Office Outlook Recipient Control (ole32.dll) Denial of Service Exploit
No description provided by source. !-- ------------------------------------------------------------------------ Microsoft Office Outlook Recipient Control ole32.dll Denial of Service author: shinnai site: http://shinnai.altervista.org mail: shinnaiatautisticidotorg and, always, special thanks to...
Microsoft Outlook ActiveX控件远程Internet Explorer拒绝服务漏洞
Microsoft Outlook是Office套件所捆绑的邮件客户端。 Microsoft Outlook的Recipient控件（ole32.dll）存在拒绝服务漏洞。如果用户受骗打开了恶意的HTML邮件的话，就会导致Internet Explorer或其他使用该ActiveX控件的应用程序崩溃。 Microsoft Outlook XP Microsoft Outlook 98 Microsoft Outlook 97 Microsoft Outlook 2003 Microsoft Outlook 2002 Microsoft Outlook 2000...
Microsoft Office Outlook Recipient Control - 'ole32.dll' Denial of Service
milw0rm.com 2006-12-18...
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service conditions in Internet Explorer or other applications that use the ActiveX control...
Microsoft Office Outlook Recipient Control - ole32.dll Denial of Service
Microsoft Office Outlook Recipient Control - ole32.dll Denial of Service milw0rm.com 2006-12-18...
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service
Microsoft Outlook - ActiveX Control Remote Internet Explorer Denial of Service source: https://www.securityfocus.com/bid/21649/info The Microsoft Office Outlook Recipient Control is prone to a denial-of-service vulnerability. An attacker can exploit this issue to trigger denial-of-service...
MS Office Outlook Recipient Control (ole32.dll) Denial of Service Exploit
Exploit for unknown platform in category dos / poc ========================================================================= MS Office Outlook Recipient Control ole32.dll Denial of Service Exploit ========================================================================= 0day.today 2018-04-02...
MS05-030 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
This module exploits a stack buffer overflow in the news reader of Microsoft Outlook Express. This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'MS05-030 Microsoft Outlook Express NNTP Response...
Code injection
Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book WAB file...