Products > Security

Critical Bug in Outlook

(1/3) > >>

BU508A:
stumbled over this a few minutes ago:

https://infosec.exchange/@briankrebs/111931702735845171

Quote:
"Heads up: Microsoft has updated its security advisory for the critical Outlook bug they patched on Tuesday, the one that can be exploited just by a malicious message being viewed in the preview pane. They're now saying it's under active attack.

This remote code execution vulnerability is assigned a CVSS3.1 (badness) score of 9.8."

eTobey:
I wonder when the corresponding feature, that allows this, was introduced. Any idea?

coppercone2:
haha 4 years of asking if i checked my email well no I am keeping your servers safe

Halcyon:
Good find! Thankfully it's limited to older versions of Outlook. If you're one of these users, update straight away!

SeanB:
Yet how many enterprise users or business users ever update Outlook, especially if the have older versions that "still work" and are paid for, not the current rental option. I know many government offices still use Outlook 2002, with it never having had any patches or updates applied, and there are still a good number of places running on XP, including a lot of government offices.

Navigation

[0] Message Index

[#] Next page