CVE-2010-0266: Code Injection
Microsoft Office Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2 does not properly verify e-mail attachments with a PRATTACHMETHOD property value of ATTACHBYREFERENCE, which allows user-assisted remote attackers to execute arbitrary code via a crafted message, aka "Microsoft Outlook SMB Attachment Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0266?
The severity of CVE-2010-0266 is rated as critical due to the potential for remote code execution.
How do I fix CVE-2010-0266?
To fix CVE-2010-0266, users should apply the security update from Microsoft as recommended in their security bulletins.
Which Microsoft Outlook versions are affected by CVE-2010-0266?
CVE-2010-0266 affects Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP1 and SP2.
Can CVE-2010-0266 be exploited without user interaction?
CVE-2010-0266 requires user interaction to exploit, as it involves opening a crafted email message.
What type of attack does CVE-2010-0266 facilitate?
CVE-2010-0266 facilitates remote code execution attacks through malicious email attachments.