CVE-2007-0033 Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
HighCVSS 9.3
EPSS 32.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Outlook 2002 and 2003 allows user-assisted remote attackers to execute arbitrary code via a malformed VEVENT record in an .iCal meeting request or ICS file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft office | = 2000-sp3 | No fix listed |
| Microsoft office | = xp-sp3 | No fix listed |
| Microsoft office | = 2003-sp2 | No fix listed |
| Microsoft outlook | = 2000 | No fix listed |
| Microsoft outlook | = 2002 | No fix listed |
| Microsoft outlook | = 2003 | No fix listed |
References
- 23674 third-party-advisory
- 1017488 vdb-entry
- VU#476900 third-party-advisory us-government-resource
- 31252 vdb-entry
- HPSBST02184 vendor-advisory
- 21931 vdb-entry
- TA07-009A third-party-advisory us-government-resource
- ADV-2007-0104 vdb-entry
- MS07-003 vendor-advisory
- oval:org.mitre.oval:def:516 signature vdb-entry