Vulnerability in Microsoft Outlook 2002

Systems Affected

Systems running Microsoft Office XP and Outlook 2002

Overview

There is a vulnerability in Outlook 2002 that could allow attackers to take control of your computer.

Description

By taking advantage of the way Outlook interprets email links, an attacker may be able to gain control of your computer.

A technical description of these vulnerabilities is available from US-CERT in TA04-070A and from Microsoft in MS04-009.

Resolution

Apply a patch

Microsoft's Office Security Update for March 2004 links to the necessary patches.

References

• US-CERT Technical Alert TA04-070A - <http://www.us-cert.gov/cas/techalerts/TA04-070A.html>
• Microsoft's Office Security Update for March 2004 - <http://www.microsoft.com/security/security_bulletins/20040309_office.asp>
• Microsoft Security Bulletin MS04-009 - <http://www.microsoft.com/technet/security/bulletin/ms04-009.mspx>

This document is available from <http://www.us-cert.gov/cas/alerts/SA04-070A.html>

Copyright 2004 Carnegie Mellon University. Terms of use

Revision History

March 10, 2004: Initial release