Detections
Analytics
MS13-026: Vulnerability in Office Outlook for Mac Could Allow Information Disclosure (2813682) (Mac OS X)
medium Nessus Plugin ID 65217
Language:
Synopsis
An application installed on the remote Mac OS X host is affected by an information disclosure vulnerability.Description
The remote Mac OS X host is running a version of Microsoft Outlook that allows content from a remote server to be loaded without user interaction when a user previews or opens a specially crafted HTML email message. This could allow an attacker to verify that an account is actively used and that the email had been viewed.Solution
Microsoft has released patches for Office for Mac 2011 and Office 2008 for Mac.See Also
http://technet.microsoft.com/en-us/security/bulletin/ms13-026
Plugin Details
Severity: Medium
ID: 65217
File Name: macosx_ms13-026.nasl
Version: 1.14
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 3/12/2013
Updated: 11/27/2023
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 2.5
CVSS v2
Risk Factor: Medium
Base Score: 5
Temporal Score: 3.7
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
CVSS Score Source: CVE-2013-0095
Vulnerability Information
CPE: cpe:/a:microsoft:office:2008::mac, cpe:/a:microsoft:office:2011::mac
Required KB Items: Host/local_checks_enabled, Host/MacOSX/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 3/12/2013
Vulnerability Publication Date: 3/12/2013
Reference Information
CVE: CVE-2013-0095
BID: 58333