Signature Detail
Short Name |
POP3:MS-OUTLOOK-2003-OBJ-SEC-BS |
|---|---|
Severity |
Medium |
Recommended |
No |
Category |
POP3 |
Keywords |
Microsoft Outlook 2003 Object Security Bypass |
Release Date |
2012/12/26 |
Update Number |
2215 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
POP3: Microsoft Outlook 2003 Object Security Bypass
This signature detects attempts to exploit a known vulnerability against Microsoft Outlook 2003. A successful attack could allow the attacker to have media file script code executed on an affected system.
Extended Description
Microsoft Outlook is reportedly prone to a media file script execution vulnerability. This issue is due to a design error that would allow for the execution of scripts located in media files regardless of security settings. This issue might allow an attacker to execute arbitrary files on the affected computer. Leveraging other issues, such as the Microsoft Outlook 2003 Predictable File Location Weakness (BID 10307), it might be possible for an attacker to execute arbitrary, attacker-supplied code.
Affected Products
- Microsoft Outlook 2003
References
- BugTraq: 10369
- CVE: CVE-2004-0503