First published: Fri Feb 07 2003(Updated: )
Microsoft Outlook 2002 does not properly handle requests to encrypt email messages with V1 Exchange Server Security certificates, which causes Outlook to send the email in plaintext, aka "Flaw in how Outlook 2002 handles V1 Exchange Server Security Certificates could lead to Information Disclosure."
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Microsoft Outlook | =2002-sp2 | |
Microsoft Outlook | =2002-sp1 | |
Microsoft Outlook | =2002 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2003-0007 is classified as a medium severity vulnerability due to the potential for information disclosure.
CVE-2003-0007 affects Microsoft Outlook 2002 by causing it to send email messages encrypted with V1 Exchange Server Security certificates in plaintext.
The impacted versions of Microsoft Outlook for CVE-2003-0007 are 2002, 2002 SP1, and 2002 SP2.
A recommended workaround for CVE-2003-0007 is to avoid using V1 Exchange Server Security certificates for encrypting emails.
To fix CVE-2003-0007, you should apply the latest security updates provided by Microsoft for Outlook 2002.