PT-2017-1867 · Microsoft · Outlook For Mac 2011

Publicado 2017-04-12 · Atualizado 2019-10-03 · CVE-2017-0207

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook for Mac 2011

Description The issue is related to a spoofing problem that allows remote attackers to spoof web content via a crafted email with specific HTML tags. This is due to inadequate access control in the Microsoft Outlook email client.

Recommendations For Microsoft Outlook for Mac 2011, consider disabling the rendering of HTML emails as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2017-01023

CVE-2017-0207

Produtos afetados

Outlook For Mac 2011

Referências · 6

• http://securitytracker.com/id/1038242 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-0207 · Nota de Segurança
• http://securityfocus.com/bid/97463 · Nota
• https://bdu.fstec.ru/vul/2017-01023 · Nota de Segurança
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-0207 · Aviso do Fabricante