Gravité: : Critique
  Identifiant(s) CVE: : CVE-2010-2728
  Date du conseil: 20 février 2013

  Description

This security update addresses a vulnerability that could allow remote code execution once a user opened a specially crafted email message via an affected version of Microsoft Outlook. The said MS Outlook should be connected to an Exchange server with Online Mode in order to be vulnerable. In addition, this vulnerability also gives an attacker user rights to the system.

  Information Exposure Rating:

For information on patches specific to the affected software, please refer to this Microsoft Web page.

  Affected software and version:

  • Microsoft Office 2003 Service Pack 3
  • Microsoft Office XP Service Pack 3