Microsoft Outlook 'S/MIME EmailAddress' Attribute Mismatch Security Weakness

Bugtraq ID:	60591
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 15 2013 12:00AM
Updated:	Nov 06 2013 12:13AM
Credit:	Patrick Dunstan
Vulnerable:
Not Vulnerable:

Microsoft Outlook 'S/MIME EmailAddress' Attribute Mismatch Security Weakness

Microsoft Outlook is prone to a security weakness.

An attacker may exploit this issue to conduct phishing attacks. Other attacks are possible.

Microsoft Outlook 'S/MIME EmailAddress' Attribute Mismatch Security Weakness

The researcher has created a proof-of-concept to demonstrate this issue. Please see the references for more information

Microsoft Outlook 'S/MIME EmailAddress' Attribute Mismatch Security Weakness

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Outlook 'S/MIME EmailAddress' Attribute Mismatch Security Weakness

References:

• Microsoft Outlook Homepage (Microsoft )