PT-2007-1528 · Microsoft · Outlook

Published 2007-01-09 · Updated 2018-10-16 · CVE-2007-0033

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Outlook versions 2002 through 2003

Description A remote code execution issue exists when Microsoft Outlook parses a file and processes a malformed VEVENT record in an .iCal meeting request or ICS file, allowing attackers to execute arbitrary code.

Recommendations For Microsoft Outlook versions 2002 and 2003, consider avoiding the use of .iCal meeting requests or ICS files until a fix is available. As a temporary workaround, restrict the processing of VEVENT records in .iCal meeting requests or ICS files to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2007-0033

Affected Products

Outlook

References · 15

• https://nvd.nist.gov/vuln/detail/CVE-2007-0033 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0033 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-003 · Vendor Advisory
• http://securityfocus.com/archive/1/457274/100/0/threaded · Vendor Advisory
• http://kb.cert.org/vuls/id/476900 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2007/MS07-003 · Note
• http://vupen.com/english/advisories/2007/0104 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A516 · Note
• http://osvdb.org/31252 · Note
• http://securitytracker.com/id?1017488 · Note
• http://securityfocus.com/archive/1/archive/1/457274/100/0/threaded · Note
• http://securityfocus.com/bid/21931 · Note
• http://us-cert.gov/cas/techalerts/TA07-009A.html · Note
• http://secunia.com/advisories/23674 · Note
• http://frsirt.com/english/advisories/2007/0104 · Note