MS10-064: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

NASLDB: MS10-064: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

General

ID: 49222
Name: MS10-064: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

Summary: Checks version of Contab32.dll

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The Outlook component of Microsoft Office has a remote code execution
vulnerability. It is possible for a remote attacker to execute
arbitrary code if a user opens or previews a specially crafted email
in an affected version of Outlook that is connected to an Exchange
server with Online Mode.

Exploiting

Exploit Available: False
Exploitability Ease: No known exploits are available

Sources

CVE: CVE-2010-2728
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2010/09/14
Patch Release: 2010/09/14
Plugin Release: 2010/09/14

Plugin

Version: 1.12
Filename: smb_nt_ms10-064.nasl
Filesize: 4056 bytes
MD5 Hash: 5e9a4a5d9e71074cf050010d290d3e54

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl"