Detections
Analytics
Security Updates for Outlook (October 2018)
high Nessus Plugin ID 118014
Language:
Synopsis
The Microsoft Outlook application installed on the remote host is affected by multiple vulnerabilities.Description
The Microsoft Outlook application installed on the remote host is missing security updates. It is, therefore, affected by multiple vulnerabilities including a remote code execution vulnerability requiring user interaction. See Microsoft Security Advisory ADV180026 for more information.Solution
Microsoft has released the following security updates to address this issue:-KB4092477
-KB4461440
-KB4227170
See Also
http://www.nessus.org/u?a01db1c3
http://www.nessus.org/u?c8fd9e29
Plugin Details
Severity: High
ID: 118014
File Name: smb_nt_ms18_oct_outlook.nasl
Version: 1.3
Type: local
Agent: windows
Family: Windows : Microsoft Bulletins
Published: 10/9/2018
Updated: 6/10/2022
Supported Sensors: Nessus
Risk Information
CVSS Score Rationale: Score based on analysis of the vendor advisory.
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
CVSS Score Source: manual
CVSS v3
Risk Factor: High
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Vulnerability Information
CPE: cpe:/a:microsoft:outlook
Required KB Items: SMB/MS_Bulletin_Checks/Possible
Patch Publication Date: 10/9/2018
Vulnerability Publication Date: 10/9/2018