PT-2002-2217 · Microsoft · Outlook

Published 2002-12-18 · Updated 2018-10-12 · CVE-2002-1255

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions: Microsoft Outlook version 2002

Description: The issue allows remote attackers to cause a denial of service, resulting in repeated failure, via an email message with a certain invalid header field. This can be accessed using protocols such as POP3, IMAP, or WebDAV.

Recommendations: For Microsoft Outlook version 2002, consider avoiding the use of invalid header fields in email messages to minimize the risk of exploitation. As a temporary workaround, restrict access to email messages with suspicious headers until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2002-1255

Affected Products

Outlook

References · 4

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-1255 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/10763 · Note
• http://securityfocus.com/bid/6319 · Note