Microsoft Outlook File Attachment Denial Of Service Vulnerability

Bugtraq ID:	45065
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Nov 26 2010 12:00AM
Updated:	Nov 26 2010 12:00AM
Credit:	Sarid Harper
Vulnerable:	Microsoft Outlook 2007 SP2 0
Not Vulnerable:

Microsoft Outlook File Attachment Denial Of Service Vulnerability

Microsoft Outlook is prone to a denial-of-service vulnerability because the application fails to properly handle certain email attachments.

An attacker can exploit this issue to crash the application, resulting in a denial-of-service condition.

The issue affects Microsoft Outlook 2007 SP2; other versions may also be affected.

Microsoft Outlook File Attachment Denial Of Service Vulnerability

An attacker may trigger this issue by enticing a user to open an email massage and click on an attachment.

Microsoft Outlook File Attachment Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Outlook File Attachment Denial Of Service Vulnerability

References:

• Microsoft Outlook Email File Attachment Denial of Service Vulnerability (Microsoft)
  
• Microsoft Outlook Homepage (Microsoft )