102 matches found
Microsoft Office Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails. The attacker would have to u...
Description of the security update for Outlook 2016: October 10, 2017
None None...
Description of the security update for Outlook 2013: October 10, 2017
Description of the security update for Outlook 2013: October 10, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Outlook 2013: September 12, 2017
Description of the security update for Outlook 2013: September 12, 2017 Summary There is a Microsoft Office update for defense-in-depth updates to help improve security-related features. To learn more about the vulnerability, see Microsoft advisory ADV170015. Note To apply this security update, y...
Description of the security update for Outlook 2007: June 13, 2017
Description of the security update for Outlook 2007: June 13, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
ytnef denial of service vulnerability (CNVD-2017-09347)
ytnef is an application library for extracting data from winmail.dat files. A denial of service vulnerability exists in the 'MAPIPrint' function in the lib/ytnef.c file in ytnef version 1.9.2. A remote attacker can exploit this vulnerability to cause a denial of service null pointer backreference...
DEBIAN-CVE-2017-9470
In ytnef 1.9.2, the MAPIPrint function in lib/ytnef.c allows remote attackers to cause a denial of service NULL pointer dereference and application crash via a crafted file...
Microsoft Exchange Service Abuse: Ruler
Microsoft Exchange Service Abuse Ruler is a tool that allows you to interact with Exchange servers through the MAPI/HTTP protocol. The main aim is abuse the client-side Outlook mail rules. “ Silentbreak did a great job with this attack and it has served us well. The only downside has been that it...
UBUNTU-CVE-2017-6310
An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...
UBUNTU-CVE-2017-6307
An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker...
DEBIAN-CVE-2017-6310
An issue was discovered in tnef before 1.4.13. Four type confusions have been identified in the fileaddmapiattrs function. These might lead to invalid read and write operations, controlled by an attacker...
DEBIAN-CVE-2017-6307
An issue was discovered in tnef before 1.4.13. Two OOB Writes have been identified in src/mapiattr.c:mapiattrread. These might lead to invalid read and write operations, controlled by an attacker...
tnef 'src/mapi_attr.c:mapi_attr_read()' function denial of service vulnerability
tnef is a set of programs for decompressing MIME attachments. A security vulnerability in the 'src/mapiattr.c:mapiattrread' function of tnef allows an attacker to conduct a denial of service attack by submitting a special file that triggers invalid read and write operations...
Microsoft Dynamics CRM 2011 Update Rollup 15
Microsoft Dynamics CRM 2011 Update Rollup 15 We have identified a compatibility issue that occurs when you use the Microsoft Dynamics CRM 2011 Client for Outlook with Update Rollup 15 applied against a Dynamics CRM 2013 server. This issue does not affect Dynamics CRM 2011 servers. A new Update...
An Unexpected MAPI Error Occurred - Catalog Not Found
When trying to promote to the vdisk, it says an unexpected MAPI error occured...
Microsoft Office Information Disclosure Vulnerability
An information disclosure vulnerability exists when Microsoft Outlook fails to enforce copy/paste permissions on DRM-protected emails. An attacker who successfully exploited the vulnerability could potentially extract plaintext content from DRM-protected draft emails. The attacker would have to u...
Microsoft Windows MAPI DLL Loading CVE-2016-0020 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can leverage this issue to execute arbitrary code with elevated privileges. Failed exploit attempts will result in a denial of service condition. Technologies Affected Microsoft Windows 7 for...
Oracle: Security Advisory (ELSA-2013-0515)
The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 21 Update: zarafa-7.1.12-2.fc21
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...
[SECURITY] Fedora 20 Update: zarafa-7.1.12-2.fc20
The Zarafa Collaboration Platform is a Microsoft Exchange replacement. The Open Source Collaboration provides an integration with your existing Linux mail server, native mobile phone support by ActiveSync compatibility and a webaccess with 'Look & Feel' similar to Outlook using Ajax. Including an...