PT-2007-1528 · Microsoft · Outlook

Publicado 2007-01-09 · Atualizado 2018-10-16 · CVE-2007-0033

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2002 through 2003

Description A remote code execution issue exists when Microsoft Outlook parses a file and processes a malformed VEVENT record in an .iCal meeting request or ICS file, allowing attackers to execute arbitrary code.

Recommendations For Microsoft Outlook versions 2002 and 2003, consider avoiding the use of .iCal meeting requests or ICS files until a fix is available. As a temporary workaround, restrict the processing of VEVENT records in .iCal meeting requests or ICS files to minimize the risk of exploitation.

Correção

Identificadores relacionados

CVE-2007-0033

Produtos afetados

Outlook

Referências · 15

• https://nvd.nist.gov/vuln/detail/CVE-2007-0033 · Nota de Segurança
• http://kb.cert.org/vuls/id/476900 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-003 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0033 · Nota de Segurança
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-003 · Aviso do Fabricante
• http://securityfocus.com/archive/1/457274/100/0/threaded · Aviso do Fabricante
• http://vupen.com/english/advisories/2007/0104 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A516 · Nota
• http://osvdb.org/31252 · Nota
• http://securitytracker.com/id?1017488 · Nota
• http://securityfocus.com/archive/1/archive/1/457274/100/0/threaded · Nota
• http://securityfocus.com/bid/21931 · Nota
• http://us-cert.gov/cas/techalerts/TA07-009A.html · Nota
• http://secunia.com/advisories/23674 · Nota
• http://frsirt.com/english/advisories/2007/0104 · Nota