HTTP: Microsoft Outlook RWZ Integer Overflow Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft Outlook. A successful attack can lead to arbitrary code execution.

Extended Description

A remote code execution vulnerability exists in the way that Microsoft Outlook parses specially modified rule export files, aka "Microsoft Outlook Remote Code Execution Vulnerability." This affects Office 365 ProPlus, Microsoft Office, Microsoft Outlook. This CVE ID is unique from CVE-2018-8522, CVE-2018-8524, CVE-2018-8576.

Affected Products

Microsoft office_365_proplus

References

BugTraq: 105825

CVE: CVE-2018-8582

URL: https://www.fortinet.com/blog/threat-research/patch-your-microsoft-outlook--fortinet-discovered-four-outlook-r.html

Short Name

HTTP:MICROSOFT-CVE-2018-8582-IO

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Outlook RWZ Integer Overflow Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?