Security News -  Security Reviews -   Exploits -  Tools -  UNIX Focus -  Windows Focus
Home  Ask the Team  Mailing Lists  Advertising Info  Advisories  About SecuriTeam  Blogs Brought to you by: Suppliers of: Website Testing Tools Network Testing Tools Software Testing Tools SecuriTeam in Your Inbox New vulnerability? New tool? Tell us (Our PGP key). Network Enabled Discount: SecuriTeam5_SANS Promo With Us Subjects of Interest: Vulnerability Management SQL Injection Buffer Overflows Active Network Scanning Fuzzing Fuzzer Report Network Security Network Scanner Pen Testing Security Scanner Scanner Review Fuzzer Review Web Scanner Review	Microsoft Outlook mailto Command Line Switch Injection 12 Mar. 2008    Summary Microsoft Outlook provides "an integrated solution for managing and organizing e-mail messages, schedules, tasks, notes, contacts, and other information". Remote exploitation of an input validation error in the handling of "mailto" URIs by Microsoft Corp.'s Outlook may allow arbitrary code execution.   Credit: The information has been provided by iDefense Labs. The original article can be found at: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=673 Free Website Security Scan Free Fuzzer Report Vulnerability Assessment Detect web app vulnerabilities University study comparing the top Accurate and automated scanning Get guidance from professionals. 6 commercially availble fuzzers. for networks of any size.    Details Protect your website! Free Trial, Nothing to install. No interruption of visitors. www.beyondsecurity.com/vulnerability-scanner Vulnerable Systems:  * Microsoft Outlook 2007 on Windows XP SP2 It is possible to construct a "mailto" URI which causes the web browser to pass extra command line switches to Outlook. These switches can modify Outlook's account configuration. Analysis: Exploitation of this vulnerability may allow an attacker to access sensitive information or take complete control of an affected system. In order to exploit this vulnerability, an attacker would have to convince a user to view an attacker-controlled website. Workaround: Disabling the "mailto" URI handler will prevent exploitation of this vulnerability. However, doing so will also disable e-mail links within all applications. Vendor response: Microsoft has addressed this vulnerability with Security Bulletin MS08-015. For more information, consult their bulletin at the following URL: http://www.microsoft.com/technet/security/Bulletin/ms08-015.mspx CVE Information: CVE-2008-0110 Disclosure Timeline: 07/03/2007 - Initial vendor notification 07/03/2007 - Initial vendor response 03/11/2008 - Coordinated public disclosure  Comments: blog comments powered by Disqus	Related Articles Microsoft Windows Local Privilege Escalation Vulnerabilities Microsoft Office Use After Free Memory Corruption Vulnerabilities Microsoft Internet Explorer Execute Arbitrary Code Remote Memory Corruption Vulnerabilities Microsoft Internet Explorer Cross-Domain Information Disclosure Vulnerabilities Microsoft Windows TCP/IP Stack Privilege Escalation Vulnerabilities Microsoft Windows OLE Code Execution Vulnerabilities Microsoft Internet Explorer Cross-Domain Execute Arbitrary Code Vulnerabilities Microsoft SharePoint Server Privilege Escalation Vulnerabilities Microsoft Office Invalid Pointer Memory Corruption Vulnerabilities Microsoft Internet Explorer Privilege Escalation Vulnerabilities Microsoft Windows Kernel Mode Driver Denial Of Service Vulnerabilities Microsoft Secure Channel Code Execution Vulnerabilities Microsoft Internet Explorer Denial-Of-Service Memory Corruption Vulnerabilities Microsoft Internet Explorer Cross-Domain Obtain Sensitive Information Vulnerabilities Microsoft OLE Automation Array Code Execution Vulnerabilities Microsoft XML Core Services Remote Code Execution Vulnerabilities Microsoft Internet Explorer Cross-Domain Memory Corruption Vulnerabilities Microsoft Windows Kerberos Checksum Remote Privilege Escalation Vulnerabilities Microsoft Windows Audio Service Privilege Escalation Vulnerabilities Microsoft Input Method Editor (IME) For Japanese Remote Privilege Escalation Vulnerabilities  Featured Articles Microsoft Windows Graphics Component Remote Code Execution Vulnerabilities Microsoft Windows Local Remote Procedure Call (LRPC) Server Spoofing LPC Port Message Handling Local Stack Buffer Overflow Vulnerability Microsoft SharePoint Server Multiple Component Crafted Page Content Handling Remote Code Execution Vulnerability Microsoft Windows Win32k.sys RFONTOBJ bTextExtent Function Handling Local Integer Overflow DoS Vulnerability Microsoft Windows Kernel Memory Object Handling Race Condition Local Privilege Escalation (2013-1294) Vulnerability Microsoft Windows Win32k.sys Memory Object Handling Race Condition Local Privilege Escalation (2013-1283) Vulnerability Microsoft Visio Viewer Tree Object Type Confusion Visio File Handling Arbitrary Code Vulnerability Microsoft Office for Mac HTML5 Email Message Unspecified Content Tag Loading Information Disclosure Vulnerability Microsoft SharePoint Callback Function URL Handling Privilege Escalation Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege (2013-1287) Vulnerability Microsoft Windows USB Driver Memory Object Handling Local Privilege Escalation Vulnerability Microsoft Windows Kernel Memory Object Handling Local Privilege Escalation Vulnerability Microsoft Windows SSL/TSL Forced Downgrade MitM Weakness Microsoft Windows Memory Object Handling Local Memory Privilege Escalation Vulnerability Microsoft Windows Privilege Escalation Vulnerability Microsoft .NET Framework Serialization Remote Code Execution Vulnerability Microsoft Visio Viewer VSD File Format Remote Code Execution Vulnerability Microsoft .NET Framework Input Serialization CVE-2012-0160 Remote Code Execution Vulnerability Microsoft .NET Framework ASP.NET Forms Authentication Bypass Vulnerability 'TrendMicro Control Manager CASProcessor.exe BLOB Code Execution Vulnerability'
	Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus - Blogs - CVEs

Copyright © Beyond Security® All rights reserved.
Terms of Use Site Privacy Statement.
SecuriTeam™ is a trademark of Beyond Security®