(MS10-064) Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2315011)
CVE Identifier: CVE-2010-2728
Advisory Date: FEB 20, 2013
This security update addresses a vulnerability that could allow remote code execution once a user opened a specially crafted email message via an affected version of Microsoft Outlook. The said MS Outlook should be connected to an Exchange server with Online Mode in order to be vulnerable. In addition, this vulnerability also gives an attacker user rights to the system.
TREND MICRO PROTECTION INFORMATION
For information on patches specific to the affected software, please refer to this Microsoft Web page.
AFFECTED SOFTWARE AND VERSION
- Microsoft Office 2003 Service Pack 3
- Microsoft Office XP Service Pack 3