POP3: Microsoft Outlook 2003 Object Security Bypass

This signature detects attempts to exploit a known vulnerability against Microsoft Outlook 2003. A successful attack could allow the attacker to have media file script code executed on an affected system.

Extended Description

Microsoft Outlook is reportedly prone to a media file script execution vulnerability. This issue is due to a design error that would allow for the execution of scripts located in media files regardless of security settings. This issue might allow an attacker to execute arbitrary files on the affected computer. Leveraging other issues, such as the Microsoft Outlook 2003 Predictable File Location Weakness (BID 10307), it might be possible for an attacker to execute arbitrary, attacker-supplied code.

Affected Products

Microsoft outlook_2003

References

BugTraq: 10369

CVE: CVE-2004-0503

Short Name
POP3:MS-OUTLOOK-2003-OBJ-SEC-BS
Severity
Minor
Recommended
False
Recommended Action
None
Category
POP3
Keywords
2003 Bypass CVE-2004-0503 Microsoft Object Outlook Security bid:10369
Release Date
12/26/2012
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3375
False Positive
Unknown
Vendors

Microsoft

CVSS Score

5.0

Found a potential security threat?