Get a Pentest and security assessment of your IT network.

Advisories

Microsoft Outlook Content Parsing Integer Underflow

Secunia Research has discovered a vulnerability in Microsoft Outlook, which can be exploited by malicious people to compromise a user’s system. The vulnerability is caused by an integer underflow error when parsing certain content and can be exploited to cause a heap-based buffer overflow via e.g. a specially crafted e-mail message. Successful exploitation may allow execution of arbitrary code, but requires that Outlook is connected to an Exchange server with Online Mode (not default setting for Outlook 2003 and 2007).

 

You can download this advisory from the following link: https://packetstormsecurity.com/files/download/93867/secunia-msoutlook.txt

Source: https://packetstormsecurity.com/files/93867/Microsoft-Outlook-Content-Parsing-Integer-Underflow.html

Related posts
Advisories

CSIS2005-1.txt

Advisories

Secunia Security Advisory 17625

Advisories

Secunia Security Advisory 20411

Advisories

Secunia Security Advisory 23300