PT-2017-1867 · Microsoft · Outlook For Mac 2011

Published 2017-04-12 · Updated 2019-10-03 · CVE-2017-0207

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Outlook for Mac 2011

Description The issue is related to a spoofing problem that allows remote attackers to spoof web content via a crafted email with specific HTML tags. This is due to inadequate access control in the Microsoft Outlook email client.

Recommendations For Microsoft Outlook for Mac 2011, consider disabling the rendering of HTML emails as a temporary workaround until a patch is available. Restrict access to sensitive information to minimize the risk of exploitation.

Fix

Improper Access Control

Weakness Enumeration

CWE-284

Related Identifiers

BDU:2017-01023

CVE-2017-0207

Affected Products

Outlook For Mac 2011

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-0207 · Security Note
• https://bdu.fstec.ru/vul/2017-01023 · Security Note
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0207 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2017-0207 · Vendor Advisory
• http://securitytracker.com/id/1038242 · Note
• http://securityfocus.com/bid/97463 · Note