QID 92133

Date Published: 2024-04-10

QID 92133: Microsoft Outlook for Windows Spoofing Vulnerability for April 2024

Outlook for Windows, crafted by Microsoft, is an email client. It offers comprehensive tools for managing emails, calendars, contacts, and tasks seamlessly. Renowned for its user-friendly interface and robust functionality, it caters to both personal and professional email needs with efficiency and ease. Product Affected: Outlook for Windows version prior to 1.2023.0322.0100 Detection Logic: The detection logic involves querying the WMI class Microsoft.OutlookForWindows to obtain the version of Outlook for Windows.

This vulnerability, if successfully exploited, could lead to the disclosure of NTLM hashes.

CVSS V3 rated as Critical - 8.1 severity.

CVSS V2 rated as High - 6.4 severity.

Solution

Customers are advised to refer to CVE-2024-20670 and for more information pertaining to this vulnerability.

Vendor References

CVE-2024-20670 - msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20670

CVEs related to QID 92133

CVE-2024-20670 |

Software Advisories

Advisory ID	Software	Component	Link
CVE-2024-20670			msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20670

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].