Outlook View ActiveX Vulnerability
We've all heard the saying, "The only things guaranteed in life are death and taxes!" Well, some people are beginning to think that we need to add a third item to that list of sure things. "The only things guaranteed in life are death, taxes and new security vulnerabilities with each incarnation of Microsoft's Office Suite." Yesterday, noted Bulgarian security consultant, Georgi Guninski, went public with a security advisory for Office XP users that would allow a malicious web developer unencumbered access to a victim's e-mails. Simply by visiting a web page or opening a web enabled e-mail message, an Outlook user would unwittingly expose not only Outlook, but also the entire Windows system to the attacker. Further testing by KeyLabs, and
August 2nd, 2009





Home