PT-2010-4248 · Microsoft · Exchange Server+1

Dyon Balding · Publicado 2010-09-15 · Atualizado 2018-10-12 · CVE-2010-2728

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2002 SP3, 2003 SP3, and 2007 SP2

Description A remote code execution issue exists in Microsoft Outlook when it parses content in a specially crafted e-mail message, specifically in configurations where Outlook connects to an Exchange Server in Online Mode. This allows remote attackers to execute arbitrary code. An attacker who successfully exploits this issue could take complete control of an affected system, enabling them to install programs, view, change, or delete data, or create new accounts with full user rights. Configurations using Cached Exchange Mode, or those using POP or IMAP mail servers only, are not affected.

Recommendations For Microsoft Outlook 2002 SP3, consider disabling Online Mode for Exchange Server connections until a patch is available. For Microsoft Outlook 2003 SP3, restrict access to specially crafted e-mail messages to minimize the risk of exploitation. For Microsoft Outlook 2007 SP2, avoid using Online Mode for Exchange Server connections in sensitive environments until the issue is resolved.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2728

Produtos afetados

Exchange Server

Outlook

Referências · 5

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-064 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2728 · Nota de Segurança
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7125 · Nota
• https://docs.microsoft.com/security-updates/securitybulletins/2010/MS10-064 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2728 · Nota de Segurança