PT-2024-4323 · Microsoft · Outlook

Published 2024-06-24 · Updated 2024-06-24

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Outlook (affected versions not specified)

Description The issue is related to a potential email address spoofing vulnerability in Microsoft Outlook for Windows operating systems. This could allow a remote attacker to conduct phishing attacks by embedding malicious links.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

BDU:2024-04811

Affected Products

Outlook

References · 3

• https://bdu.fstec.ru/vul/2024-04811 · Security Note
• https://forbes.com/sites/daveywinder/2024/06/21/new-security-warning-for-400-million-outlook-users-as-email-bug-revealed · Note
• https://techcrunch.com/2024/06/18/security-bug-allows-anyone-to-spoof-microsoft-employee-emails · Note