Title

Microsoft Office Outlook Information Disclosure Vulnerability (Cat II impact)

Discussion

Microsoft has released the security bulletin addressing an information disclosure vulnerability in Microsoft Office Outlook. To exploit this vulnerability, an attacker would entice a user to open a malicious S/MIME certificate sent via email. If successfully exploited, this vulnerability would allow an attacker to gain access to sensitive information and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-42295

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.