Release DateJul 15, 2010 |
Severityhigh |
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems. |
DescriptionThis indicates an attack attempt against an attachment-spoofing vulnerability in Microsoft Office Outlook.The vulnerability is caused by an error when the vulnerable software handles a malicious attachment. It allows a remote attacker to run a malicious file via sending a crafted mail. |
Affected ProductsMicrosoft Office XP Service Pack 3Microsoft Office 2003 Service Pack 3 2007 Microsoft Office System Service Pack 1 and 2007 Microsoft Office System Service Pack 2 |
Recommended ActionsApply the patch supplied by the vendor:http://www.microsoft.com/technet/security/Bulletin/MS10-045.mspx |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2010-0266 |
Reference/shttp://www.microsoft.com/technet/security/Bulletin/ms10-045.mspx (MS-ID) |