CVE-2010-3147

Description

References

• secunia.com/advisories/41050 · Vendor Advisory
• attackvector.org/new-dll-hijacking-exploits-many · Exploit
• exploit-db.com/exploits/14745 · Exploit
• securitytracker.com/id
• us-cert.gov/cas/techalerts/TA10-348A.html · US Government Resource
• docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-096
• oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12352

Autres vulnérabilités de outlook express

• CVE-2010-0816CRITIQUE 9.3Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vi…
• CVE-2008-5424MOYENNE 4.3The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed …
• CVE-2008-1448ÉLEVÉE 7.1The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the corr…
• CVE-2007-3897CRITIQUE 9.3Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Proto…
• CVE-2007-2227MOYENNE 4.3The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "no…