Microsoft Office Outlook CVE-2017-8572 Information Disclosure Vulnerability
BID:99453
Info
Microsoft Office Outlook CVE-2017-8572 Information Disclosure Vulnerability
| Bugtraq ID: | 99453 |
| Class: | Design Error |
| CVE: |
CVE-2017-8572 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 27 2017 12:00AM |
| Updated: | Jul 27 2017 12:00AM |
| Credit: | Aaron Grattafiori of Facebook, RedTeam |
| Vulnerable: |
Microsoft Outlook 2016 (64-bit editions) Microsoft Outlook 2016 (32-bit editions) Microsoft Outlook 2013 Service Pack 1 (64-bit editions) 0 Microsoft Outlook 2013 Service Pack 1 (32-bit editions) 0 Microsoft Outlook 2013 RT Service Pack 1 Microsoft Outlook 2010 (64-bit editions) Service Pack 2 Microsoft Outlook 2010 (32-bit editions) Service Pack 2 Microsoft Outlook 2007 Service Pack 3 Microsoft Office 2016 Click-to-Run (C2R) for 64-bit edition 0 Microsoft Office 2016 Click-to-Run (C2R) for 32-bit edition 0 Microsoft Office 2013 Click-to-Run (C2R) for 64-bit edition 0 Microsoft Office 2013 Click-to-Run (C2R) for 32-bit edition 0 Microsoft Office 2010 Click-to-Run (C2R) for 64-bit edition 0 Microsoft Office 2010 Click-to-Run (C2R) for 32-bit edition 0 |
| Not Vulnerable: | |
Discussion
Microsoft Office Outlook CVE-2017-8572 Information Disclosure Vulnerability
Microsoft Office Outlook is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain access to potentially sensitive information that may aid in further attacks.
Microsoft Office Outlook is prone to an information-disclosure vulnerability.
Attackers can exploit this issue to gain access to potentially sensitive information that may aid in further attacks.
Exploit / POC
Microsoft Office Outlook CVE-2017-8572 Information Disclosure Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Microsoft Office Outlook CVE-2017-8572 Information Disclosure Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Microsoft Office Outlook CVE-2017-8572 Information Disclosure Vulnerability
References:
References:
- Microsoft Homepage (Microsoft)
- Microsoft Outlook Homepage (Microsoft )
- CVE-2017-8572 | Microsoft Office Outlook Information Disclosure Vulnerability (Microsoft)