PT-2007-1529 · Microsoft · Outlook

Stuart Pearson · Publicado 2007-01-09 · Atualizado 2018-10-16 · CVE-2007-0034

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2000 through 2003

Description A buffer overflow issue exists in the Advanced Search feature of Microsoft Outlook, allowing remote attackers to execute arbitrary code via a crafted Outlook Saved Searches (OSS) file. This triggers memory corruption when the file is parsed by Outlook.

Recommendations For Microsoft Outlook versions 2000 through 2003, consider disabling the Advanced Search feature until a patch is available. Restrict access to .oss files to minimize the risk of exploitation.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-0034

Produtos afetados

Outlook

Referências · 18

• http://vupen.com/english/advisories/2007/0104 · Aviso do Fabricante
• http://securityfocus.com/archive/1/456589/100/0/threaded · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-003 · Aviso do Fabricante
• http://securityfocus.com/archive/1/457274/100/0/threaded · Aviso do Fabricante
• http://securitytracker.com/id?1017488 · Nota
• http://securityfocus.com/archive/1/archive/1/457274/100/0/threaded · Nota
• http://securityfocus.com/bid/21936 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0034 · Nota de Segurança
• http://frsirt.com/english/advisories/2007/0104 · Nota
• http://securityfocus.com/archive/1/archive/1/456589/100/0/threaded · Nota
• http://computerterrorism.com/research/ct09-01-2007.htm · Nota
• http://kb.cert.org/vuls/id/271860 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-003 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A153 · Nota
• http://osvdb.org/31254 · Nota