Outlook Flaw with Exchange Server Security Certificates
New
A security vulnerability exists in the way Microsoft Outlook 2002 handles a V1 Exchange Server Security certificate when using it to encrypt e-mail. The flaw could cause the message to be sent in plain text instead of encypted.
A security vulnerability exists in the way Microsoft Outlook 2002 handles a V1 Exchange Server Security certificate when using it to encrypt e-mail. The flaw could cause the message to be sent in plain text instead of encypted.
E-mail Editor Flaw Could Lead to Script Execution
New
A security vulnerability is created in Microsoft Outlook when using Word as the e-mail editor. The flaw may allow an attacker to run the code of their choice when a user replies to or forwards a malicious message.
A security vulnerability is created in Microsoft Outlook when using Word as the e-mail editor. The flaw may allow an attacker to run the code of their choice when a user replies to or forwards a malicious message.
Outlook View Control Exposes Unsafe Functionality
New
A security vulnerability exists in Microsoft Outlook that could allow certain macros to run in conjunction with the Outlook View Control.
A security vulnerability exists in Microsoft Outlook that could allow certain macros to run in conjunction with the Outlook View Control.
Outlook Express Vcard Handler Contains
A security vulnerability exists in Microsoft® Outlook and Outlook Express which could allow a remote attacker to run code of their choice by exploiting an unchecked buffer in the vCard component.
A security vulnerability exists in Microsoft® Outlook and Outlook Express which could allow a remote attacker to run code of their choice by exploiting an unchecked buffer in the vCard component.
Cache Bypass Vulnerability
A security vulnerability exists in Microsoft® Outlook® and Outlook Express which could allow a malicious user to send an HTML mail that, when opened, could read, but not add, change or delete, files on the recipient's computer.
A security vulnerability exists in Microsoft® Outlook® and Outlook Express which could allow a malicious user to send an HTML mail that, when opened, could read, but not add, change or delete, files on the recipient's computer.
Malformed E-mail Header Vulnerability
A security vulnerability exists in Microsoft® Outlook® and Outlook Express that under certain conditions could allow a malicious user to cause code of his choice to execute on another user's computer.
A security vulnerability exists in Microsoft® Outlook® and Outlook Express that under certain conditions could allow a malicious user to cause code of his choice to execute on another user's computer.
Persistent Mail-Browser Link Vulnerability
A security vulnerability exists affecting Microsoft® Outlook Express which could allow a malicious user to send an email that would "read over the shoulder" of the recipient as he previews subsequent emails in Outlook Express.
A security vulnerability exists affecting Microsoft® Outlook Express which could allow a malicious user to send an email that would "read over the shoulder" of the recipient as he previews subsequent emails in Outlook Express.
HTML Mail Attachment Vulnerability
A security vulnerability exists in the Microsoft® Outlook Express mail client for Macintosh systems. The vulnerability could allow attachments to HTML mails to be automatically downloaded onto the user's computer.
A security vulnerability exists in the Microsoft® Outlook Express mail client for Macintosh systems. The vulnerability could allow attachments to HTML mails to be automatically downloaded onto the user's computer.
Long File Name Issue Affecting Microsoft® Outlook 98 and Outlook Express 4.01
A buffer overflow in the way Microsoft email clients handle file attachments with extremely long file names has created a security vulnerability that could potentially allow a skilled hacker to use a malicious email message to run arbitrary computer code contained in the long string.
A buffer overflow in the way Microsoft email clients handle file attachments with extremely long file names has created a security vulnerability that could potentially allow a skilled hacker to use a malicious email message to run arbitrary computer code contained in the long string.















