iDefense Security Advisory 03.11.08 – Remote exploitation of an input validation error in the handling of “mailto” URIs by Microsoft Corp.’s Outlook may allow arbitrary code execution. It is possible to construct a “mailto” URI which causes the web browser to pass extra command line switches to Outlook. These switches can modify Outlook’s account configuration. iDefense has confirmed the existence of this vulnerability in Microsoft Outlook 2007 on Windows XP SP2. Previous versions may also be affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/64530/03.11.08-3.txt
Source: https://packetstormsecurity.com/files/64530/iDEFENSE-Security-Advisory-2008-03-11.3.html