MS02-067: e-mail header processing flaw could cause Outlook 2002 to fail. (Microsoft).(Brief Article)

Information Systems Auditor, February, 2003

Issue

Microsoft Outlook provides users with the ability to work with e-mail, contacts, tasks and appointments. Outlook e-mail handling includes receiving, displaying, creating, editing, sending, and organizing e-mail messages. When working with received e-mail messages, Outlook processes information contained in the header of the e-mail that carries information about where the e-mail came from, its destination, and attributes of the message.

A vulnerability exists in Outlook 2002 in its processing of e-mail header information. Attackers who successfully exploited the vulnerability could send an especially malformed e-mail to users of Outlook 2002 that would cause the Outlook client to fail under certain circumstances. The Outlook 2002 client would...

Read the rest of this article with a Free Trial at HighBeam Research.

Premium Content Partnership | HighBeam Research provides an in-depth online archive library of reference works.