This script is Copyright (C) 2017 Tenable Network Security, Inc.
An application installed on the remote macOS or Mac OS X host is
affected by a spoofing vulnerability.
The Microsoft Office application installed on the remote macOS or Mac
OS X host is missing a security update. It is, therefore, affected by
a spoofing vulnerability in Microsoft Outlook due to improper
validation of input passed via HTML tags. An unauthenticated, remote
attacker can exploit this, by sending an email with specific HTML
tags, to display a malicious authentication prompt and gain access to
a user's authentication information or login credentials.
See also :
Microsoft has released a patch for Microsoft Outlook for Mac 2011.
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 6.9
Public Exploit Available : false