HTTP: Microsoft Outlook CVE-2017-11774 Remote Code Execution

This signature detects attempts to exploit a known vulnerability against Microsoft outlook. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."

Affected Products

Microsoft outlook

References

CVE: CVE-2017-11774

Short Name

HTTP:STC:OUTLOOK:CVE-2017-11774

Severity

Major

Recommended

True

Recommended Action

Drop

HTTP: Microsoft Outlook CVE-2017-11774 Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?