MS10-045: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

NASLDB: MS10-045: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

General

ID: 47713
Name: MS10-045: Vulnerability in Microsoft Office Outlook Could Allow Remote Code Execution (978212)

Summary: Checks version of Outlook

Credits: Tenable Network Security, Inc.

Classification

Risk: –

CVSS: –
CVSS Base Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Temporal Vector: CVSS2#E:F/RL:OF/RC:C

Port: 139
Family: Windows : Microsoft Bulletins
Type: Local

Description

The Outlook component of Microsoft Office has a remote code execution
vulnerability. Opening an attachment in a specially crafted email can
result in arbitrary code execution.

A remote attacker could exploit this by sending a user an email and
tricking them into opening a malicious attachment, resulting in code
execution.

Exploiting

Exploit Available: True
Exploitability Ease: Exploits are available

Sources

CVE: CVE-2010-0266
OSVDB: –
Bugtraq: –
scipID: –

Timeline

Vulnerability Disclosure: 2010/07/13
Patch Release: 2010/07/13
Plugin Release: 2010/07/13

Plugin

Version: 1.13
Filename: smb_nt_ms10-045.nasl
Filesize: 4152 bytes
MD5 Hash: 1a8169c86145cf24e57f6887a64e9a3b

Identification: Host/patch_management_checks
Require Keys: SMB/MS_Bulletin_Checks/Possible
Dependencies: "smb_hotfixes.nasl", "ms_bulletin_checks_possible.nasl"