Microsoft Internet Explorer createTextRange() vulnerability

Overview Microsoft Internet Explorer IE fails to properly handle the createTextRange DHTML method, possibly allowing a remote, unauthenticated attacker to execute arbitrary code. Description DHTML, TextRanges, and the createTextRange Method According to Microsoft:Dynamic HTML DHTML is built on an...

SYMSA-2006-001: Buffer overflow in Microsoft Office 2000, Office XP (2002), and Office 2003 Routing Slip Metadata

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Professional Services www.symantec.com Security Advisory Advisory ID : SYMSA-2006-001 Advisory Name: Buffer overflow in Microsoft Office 2000, Office XP 2002, and Office 2003 Routing Slip Metadata. Release Date : 03-14-2006 Application :...

Microsoft Office multiple vulnerabilities

Multiple Microsoft Excel memory corruptions, all office products, including Outlook buffer overflows...

Microsoft WMF memory corruption vulnerability

Overview Microsoft applications fail to properly handle Windows Metafile WMF images potentially allowing a remote attacker to execute arbitrary code on a vulnerable system. Description The Microsoft Windows Graphics Rendering Engine supports a number of image formats including WMF images. Windows...

Microsoft Outlook / Exchange TNEF Decoding Arbitrary Code Execution

Binary data 3365.prm...

Microsoft Outlook Email Client Detection

Binary data 3366.prm...

Update Protection against a Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange (MS06-003)

A vulnerability exists in the way Microsoft Exchange server and Microsoft Outlook products handle the decoding of the Transport Neutral Encapsulation TNEF MIME attachment. The TNEF format is used by many Microsoft products such as Exchange and Outlook to transfer messages formatted as Rich Text...

US-CERT Technical Cyber Security Alert TA06-010A -- Microsoft Windows, Outlook, and Exchange Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 National Cyber Alert System Technical Cyber Security Alert TA06-010A Microsoft Windows, Outlook, and Exchange Vulnerabilities Original release date: January 10, 2006 Last revised: January 10, 2006 Source: US-CERT Systems Affected Microsoft Windows...

Microsoft Exchange Server and Microsoft Outlook TNEF messages format buffer overflow

Buffer overflow on parsing TNEF format...

Microsoft Outlook Critical Vulnerability

John Heasman and Mark Litchfield of NGSSoftware have discovered a critical vulnerability affecting Microsoft Outlook. The vulnerable versions include: Microsoft Outlook 2000 inc. Microsoft Office 2000 Service Pack 3 and Multilanguage packs Microsoft Outlook 2002 inc. Microsoft Office XP Service...

Input validation

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

CVE-2006-0002

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

CVE-2006-0002

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

CVE-2006-0002

CVE-2006-0002 is a TNEF decoding vulnerability in Microsoft Outlook (2000–2003) and Microsoft Exchange Server (5.0 SP2, 5.5 SP4, 2000 SP3) where processing a crafted TNEF MIME attachment can lead to remote code execution. Root cause described as improper handling/validation of TNEF data, enabling...

Security Update for Outlook 2003 (KB892843)

A security vulnerability exists in Microsoft Office Outlook 2003 that could allow arbitrary code to run when opening a maliciously modified email. This update resolves the vulnerability...

Microsoft Outlook / Microsoft Exchange TNEF Decoding Remote Code Execution Vulnerability

Description Microsoft Exchange Server and Outlook email clients are prone to a remote code-execution vulnerability. This vulnerability presents itself when the applications decode a message containing a specially crafted TNEF MIME attachment. Successful exploitation may result in arbitrary code...

Microsoft Security Bulletin MS06-003 Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412)

Microsoft Security Bulletin MS06-003 Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution 902412 Published: January 10, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Outlook, Microsoft Exchange, or...

MS06-003: Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412)

The remote host is running a version of Outlook or Exchange containing a bug in the Transport Neutral Encapsulation Format TNEF MIME attachment handling routine that could allow an attacker execute arbitrary code on the remote host by sending a specially crafted email. C Tenable Network Security,...

CVE-2005-4840

The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service NULL dereference and browser crash by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer...

CVE-2005-4841

The Outlook Progress Ctl control allows remote attackers to cause a denial of service Internet Explorer crash by creating a COM object of the class associated with the control's CLSID, which is not intended for use within Internet Explorer...