Lucene search

MicrosoftCVE-2010-0266

HistoryJul 15, 2010 - 12:57 p.m.

CVE-2010-0266

2010-07-1512:57:12

CWE-94

microsoft

web.nvd.nist.gov

microsoft

outlook

attachment

vulnerability

remote code execution

cve-2010-0266

nvd

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.3

Confidence

Low

EPSS

0.971

Percentile

99.8%

JSON

Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PR_ATTACH_METHOD property value of ATTACH_BY_REFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka “Microsoft Outlook SMB Attachment Vulnerability.”

Affected configurations

Nvd

Node

microsoftoutlookMatch2002sp3

AND

microsoftofficeMatchxpsp3

Node

microsoftoutlookMatch2003sp3

AND

microsoftofficeMatch2003sp3

Node

microsoftoutlookMatch2007sp1

microsoftoutlookMatch2007sp2

AND

microsoftofficeMatch2007sp1

microsoftofficeMatch2007sp2

VendorProductVersionCPE
microsoftoutlook2002cpe:2.3:a:microsoft:outlook:2002:sp3:*:*:*:*:*:*
microsoftofficexpcpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:*
microsoftoutlook2003cpe:2.3:a:microsoft:outlook:2003:sp3:*:*:*:*:*:*
microsoftoffice2003cpe:2.3:a:microsoft:office:2003:sp3:*:*:*:*:*:*
microsoftoutlook2007cpe:2.3:a:microsoft:outlook:2007:sp1:*:*:*:*:*:*
microsoftoutlook2007cpe:2.3:a:microsoft:outlook:2007:sp2:*:*:*:*:*:*
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:sp1:*:*:*:*:*:*
microsoftoffice2007cpe:2.3:a:microsoft:office:2007:sp2:*:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	outlook	2002	cpe:2.3:a:microsoft:outlook:2002:sp3::::::
microsoft	office	xp	cpe:2.3:a:microsoft:office:xp:sp3::::::
microsoft	outlook	2003	cpe:2.3:a:microsoft:outlook:2003:sp3::::::
microsoft	office	2003	cpe:2.3:a:microsoft:office:2003:sp3::::::
microsoft	outlook	2007	cpe:2.3:a:microsoft:outlook:2007:sp1::::::
microsoft	outlook	2007	cpe:2.3:a:microsoft:outlook:2007:sp2::::::
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007:sp1::::::
microsoft	office	2007	cpe:2.3:a:microsoft:office:2007:sp2::::::