Page 4 of 37 results (0.004 seconds)

CVSS: 5.0EPSS: 0%CPEs: 3EXPL: 0

Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure." Microsoft Outllok no maneja adecuadamente las peticiones para cifrar mensajes con un certificados de Seguridad de Exchange Server V1, lo que hace que Outlook envíe el mensaje en texto plano, también conocida como "Fallo en como Outlook 2002 maneja certificados de seguridad de Exchange Server podría llevar a desvelamiento de información. • http://www.securityfocus.com/bid/6667 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2003/ms03-003 https://exchange.xforce.ibmcloud.com/vulnerabilities/11133 •

CVSS: 5.5EPSS: 0%CPEs: 4EXPL: 0

Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted message. • http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0201&L=ntbugtraq&F=P&S=&P=528 http://www.securityfocus.com/bid/3825 https://exchange.xforce.ibmcloud.com/vulnerabilities/7900 • CWE-312: Cleartext Storage of Sensitive Information •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 0

Microsoft Outlook 2002 allows remote attackers to embed bypass the file download restrictions for attachments via an HTML email message that uses an IFRAME to reference malicious content. • http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html http://www.iss.net/security_center/static/8611.php http://www.securityfocus.com/bid/4334 •

CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0

Microsoft Outlook 2002 allows remote attackers to execute arbitrary JavaScript code, even when scripting is disabled, via an "about:" or "javascript:" URI in the href attribute of an "a" tag. • http://archives.neohapsis.com/archives/bugtraq/2002-03/0267.html http://www.iss.net/security_center/static/8613.php http://www.securityfocus.com/bid/4337 •

CVSS: 5.0EPSS: 2%CPEs: 3EXPL: 0

Microsoft Outlook 2002 allows remote attackers to cause a denial of service (repeated failure) via an email message with a certain invalid header field that is accessed using POP3, IMAP, or WebDAV, aka "E-mail Header Processing Flaw Could Cause Outlook 2002 to Fail." Microsoft Outlook 2002 permite a atacantes remotos causar una denegación de servicio (fallo repetido) mediante un mensaje de correo electrónico con cierto campo de cabecera inválido que es accedido usando POP3, IMAP O WebDAV. También conocido como "Error en Procesamiento de Cabecera de Correo Electrónico Podría Causar que Outlook 2002 Falle" • http://www.securityfocus.com/bid/6319 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2002/ms02-067 https://exchange.xforce.ibmcloud.com/vulnerabilities/10763 •