漏洞标题
微软Outlook提升权限漏洞
漏洞描述信息
当 Microsoft Outlook 在没有充分验证消息格式的情况下开始处理 incoming 消息时，存在一个特权提升漏洞，即“Microsoft Outlook 特权提升漏洞”。
CVSS信息
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
漏洞类别
N/A
漏洞标题
Microsoft Outlook Elevation of Privilege Vulnerability
漏洞描述信息
An elevation of privilege vulnerability exists when Microsoft Outlook initiates processing of incoming messages without sufficient validation of the formatting of the messages. An attacker who successfully exploited the vulnerability could attempt to force Outlook to load a local or remote message store (over SMB).
To exploit the vulnerability, the attacker could send a specially crafted email to a victim. Outlook would then attempt to open a pre-configured message store contained in the email upon receipt of the email.
This update addresses the vulnerability by ensuring Office fully validates incoming email formatting before processing message content.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
Microsoft Outlook 权限许可和访问控制问题漏洞
漏洞描述信息
Microsoft Outlook是美国微软（Microsoft）公司的一套电子邮件应用程序。 Microsoft Outlook中存在提权漏洞，该漏洞源于在程序处理进入的邮件时没有充分验证邮件格式。攻击者可通过向用户发送特制的邮件利用该漏洞强制Outlook加载本地或远程消息存储（通过 SMB）。以下产品及版本受到影响：Microsoft Office 2019，Office 365 ProPlus；Outlook 2010 SP2，Outlook 2013 RT SP1，Outlook 2013 SP
CVSS信息
N/A
漏洞类别
输入验证错误