Microsoft Outlook Remote Code Execution Vulnerability (949031)
Medium Nessus Network Monitor Plugin ID 4421
SynopsisArbitrary code can be executed on the remote host through the email client.
DescriptionThe remote host is running a version of Outlook or Exchange that is vulnerable to a bug when processing a specially malformed URI mailto: link, which can let an attacker execute arbitrary code on the remote host by sending a specially crafted email.
SolutionMicrosoft has released a set of patches for Outlook 2000, XP, 2003 and 2007.