SMTP: Outlook TZID Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Microsoft Outlook. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Microsoft Outlook is prone to a remote code-execution vulnerability because the application fails to properly handle malformed iCal requests. A remote attacker can exploit this issue to execute arbitrary code with the privileges of unsuspecting users. A successful exploit may aid in the remote compromise of the underlying computer.

Affected Products

Microsoft office_2003

References

BugTraq: 21931

CVE: CVE-2007-0033

URL: http://www.microsoft.com/technet/security/Bulletin/MS07-003.mspx

Short Name

SMTP:OUTLOOK:TZID-OF

Severity

Major

Recommended

False

Recommended Action

None

SMTP: Outlook TZID Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?