ID de Prueba:	1.3.6.1.4.1.25623.1.0.12092
Categoría:	Windows
Título:	Vulnerability in Outlook could allow code execution (828040)
Resumen:	NOSUMMARY
Descripción:	Description: The remote host is running a version of outlook which is vulnerable to a bug which may allow Internet Explorer to execute script code in the Local Machine zone and therefore let an attacker execute arbitrary programs on this host. To exploit this bug, an attacker would need to send an special HTML message to a user of this host. Solution : See http://www.microsoft.com/technet/security/bulletin/ms04-009.mspx Risk factor : High
Referencia Cruzada:	BugTraq ID: 9827 Common Vulnerability Exposure (CVE) ID: CVE-2004-0121 http://www.securityfocus.com/bid/9827 Bugtraq: 20040310 Outlook mailto: URL argument injection vulnerability (Google Search) http://marc.info/?l=bugtraq&m=107893704602842&w=2 Cert/CC Advisory: TA04-070A http://www.us-cert.gov/cas/techalerts/TA04-070A.html CERT/CC vulnerability note: VU#305206 http://www.kb.cert.org/vuls/id/305206 Computer Incident Advisory Center Bulletin: O-096 http://www.ciac.org/ciac/bulletins/o-096.shtml http://www.idefense.com/application/poi/display?id=79&type=vulnerabilities Microsoft Security Bulletin: MS04-009 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-009 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A843 XForce ISS Database: outlook-mailtourl-execute-code(15414) https://exchange.xforce.ibmcloud.com/vulnerabilities/15414 XForce ISS Database: outlook-ms04009-patch(15429) https://exchange.xforce.ibmcloud.com/vulnerabilities/15429
Copyright	This script is Copyright (C) 2004 Tenable Network Security

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.