3782 matches found
CVE-2005-0921
Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...
CVE-2005-0420
Microsoft Outlook Web Access OWA, when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application...
CVE-2005-1052
Microsoft Outlook 2003 and Outlook Web Access OWA 2003 do not properly display comma separated addresses in the From field in an e-mail message, which could allow remote attackers to spoof e-mail addresses...
CVE-2005-1052
The vulnerability (CVE-2005-1052) affects Microsoft Outlook 2003 and Outlook Web Access 2003, where From header display fails to correctly render comma-separated addresses. This could enable remote email spoofing since the From field may appear to originate from a different address. Root cause: i...
Microsoft Internet Explorer Content Advisor File Handling Buffer Overflow Vulnerability
Description Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive data and arbitrary machine code to be processed by the browser. A typical...
Microsoft Internet Explorer DHTML objects contain a race condition
Overview A race condition in the way that Internet Explorer handles DHTML objects may allow a remote attacker to execute arbitrary code on a vulnerable system. Description According to Microsoft:Dynamic HTML DHTML is built on an object model that extends the traditional static HTML document which...
Microsoft Internet Explorer 5.0.1 - Content Advisor File Handling Buffer Overflow (MS05-020)
source: https://www.securityfocus.com/bid/13117/info Microsoft Internet Explorer is prone to a remote buffer overflow vulnerability when handling malformed Content Advisor files. An attacker can exploit this issue by crafting a Content Advisor file with excessive data and arbitrary machine code t...
Microsoft Outlook digitally signed e-mail and name spoofing
E-mail and name of digital certificate is not checked against message's From: address...
CVE-2005-0921
Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0 allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy...
CVE-2005-0921
CVE-2005-0921 affects Microsoft Outlook 2002 Connector for IBM Lotus Domino 2.0. The vulnerability allows local users to save passwords and login credentials locally, even when password caching is disabled by a group policy. The NVD metrics show a CVSS v2 base score of 4.6 (medium), with local at...
Microsoft Outlook Web Access (OWA) owalogon.asp Redirection Account Enumeration
The remote host is running Microsoft Outlook Web Access OWA 2003. Due to a lack of sanitization of the user input, the remote version of this software is vulnerable to URL injection that can be exploited to redirect a user to a different, unauthorized web server after authenticating to OWA. This...
Security Flaw with Digital signatures in Microsoft Outlook
On 10/21/2004 the following vulnerability was reported to Microsoft: Security Flaw with Digital signatures in Microsoft Outlook - Emails in Microsoft Outlook digitally signed with S/MIME using either a commercial personal certificate like Verisign or using a certificate issued by MS Certificate...
Moving or removing folders with Outlook -- Exchange IS stops responding
FYI: Microsoft has released details about nasty bug with Exchange Server 2003 & SP1. "When you try to move or to remove a folder that contains many subfolders in Outlook, the Microsoft Exchange Information Store service stops responding, and event 9673 is recorded"...
Exploit Labs Security Advisory 2005.1
------------------------------------------------------------ - EXPL-A-2005-001 exploitlabs.com Advisory 030 - ------------------------------------------------------------ - Microsoft Outlook Web Access - OVERVIEW ======== A vulnerability in Microsoft Outlook Web Access allows malicious attackers ...
CVE-2005-0420
The CVE-2005-0420 entry concerns Microsoft Outlook Web Access (OWA) for Exchange. The connected OpenVAS NASL detail shows a concrete vulnerability in OWA 2003 where lack of sanitization of user input enables URL injection via owalogon.asp, allowing a remote attacker to cause a user to be redirect...
CVE-2005-0420
Microsoft Outlook Web Access OWA, when used with Exchange, allows remote attackers to redirect users to arbitrary URLs for login via a link to the owalogon.asp application...
Microsoft Internet Explorer contains a DHTML method heap memory corruption vulnerability
Overview Microsoft Internet Explorer contains a flaw in DHTML method handling which may allow a remote attacker to execute arbitrary code. Description The DHTML method handling in Internet Explorer fails to perform proper bounds checking. This vulnerability may allow data to be written outside th...
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection
source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attacker may leverage this issue to carry out convincing phishing attacks...
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection
Microsoft Outlook 2003 - Web Access Login Form Remote URI redirection source: https://www.securityfocus.com/bid/12459/info A remote URI-redirection vulnerability affects Microsoft Outlook Web Access. This issue occurs because the application fails to properly sanitize URI-supplied data. An attack...
uofpConfig.txt
University of Phoenix Outlook Express Unauthorized Configuration Manipulation Vendor Homepage: http://www.phoenix.edu Discovered by: Adam Baldwin [email protected] www.evilpacket.net\advisories\EP-000-0002.html Discovery Date: 1.17.2005 File Name: PhxStudent15.ocx Vulnerable Version:...