Vulnerabilities for Outlook 2013 rt (...) - CXSECURITY.COM

Vulnerabilities for 'Outlook 2013 rt'

2020-12-10

CVE-2020-17119

NVD-CWE-noinfo

, aka 'Microsoft Outlook Information Disclosure Vulnerability'.

2017-10-13

CVE-2017-11774

CWE-119

Microsoft Outlook 2010 SP2, Outlook 2013 SP1 and RT SP1, and Outlook 2016 allow an attacker to execute arbitrary commands, due to how Microsoft Office handles objects in memory, aka "Microsoft Outlook Security Feature Bypass Vulnerability."

2017-08-01

CVE-2017-8663

CWE-119

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a remote code execution vulnerability due to the way Microsoft Outlook parses specially crafted email messages, aka "Microsoft Office Outlook Memory Corruption Vulnerability"

CVE-2017-8572

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows an information disclosure vulnerability due to the way that it discloses the contents of its memory, aka "Microsoft Office Outlook Information Disclosure Vulnerability".

CVE-2017-8571

CWE-20

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, and Outlook 2016 as packaged in Microsoft Office allows a security feature bypass vulnerability due to the way that it handles input, aka "Microsoft Office Outlook Security Feature Bypass Vulnerability".

2016-09-14

CVE-2016-3366

CWE-284

Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office Spoofing Vulnerability."

2013-11-12

CVE-2013-3905

CWE-200

Microsoft Outlook 2007 SP3, 2010 SP1 and SP2, 2013, and 2013 RT does not properly expand metadata contained in S/MIME certificates, which allows remote attackers to obtain sensitive network configuration and state information via a crafted certificate in an e-mail message, aka "S/MIME AIA Vulnerability."

>>> Vendor: Microsoft 622 Products

Exchange server

Internet information server

Personal web server

Commerce server

Backoffice resource kit

Terminal server

Java virtual machine

Commercial internet system

Site server commerce

Outlook express

Windows explorer

Data access components

Zero administration kit

Msn setup bulletin board services

Visual interdev

Office converter pack

Systems management server

Virtual machine

Home publishing

Windows media services

Windows messaging

Windows media rights manager

Active movie control

Network monitor

Windows media player

Indexing service

Windows script host

Frontpage server extensions

Windows 2000 terminal services

Xml core services

Msn chat control

Msn messenger service for exchange

Windows 98 plus pack

Microsoft data access components

Metadirectory services

Content management server

Tsac activex control

Office web components

Ie for macintosh

.net windows server

Directx files viewer control

File transfer manager

Baseline security analyzer

Foundation class library

Windows 2003 server

Network firmware

See all Products for Vendor Microsoft

Copyright 2024, cxsecurity.com