Microsoft Outlook mailto URI Argument Injection (altvba)

Strike ID:
E08-03201
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2008

Description

This strike exploits a argument injection vulnerability in Microsoft Outlook. This flaw can be used to execute arbitrary code via the /altvba and /importprf options.

CVE

Bid