SMTP: Outlook Client Code Execution

This signature prevents triggering of executable code on the client's side to send an email to other users.

Extended Description

Windows OLE in Windows XP and Windows Server 2003 allows an attacker to execute code when a victim opens a specially crafted file or program aka "Windows olecnv32.dll Remote Code Execution Vulnerability."

Affected Products

Microsoft windows_xp

Short Name
SMTP:OUTLOOK:OUTLOOK-CE
Severity
Major
Recommended
True
Recommended Action
None
Category
SMTP
Keywords
CVE-2017-8487 Client Code Execution Outlook
Release Date
05/16/2017
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3590
False Positive
Unknown
Vendors

Microsoft

CVSS Score

9.3

Found a potential security threat?