• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Outlook / Microsoft Exchange TNEF Decoding Remote Code Execution Vulnerability

Solution:

Microsoft has released fixes for supported applications.

Nortel has released an advisory (2006006583) to identify vulnerable products. The vendor advises customers to follow Microsoft's recommendations and install fixes supplied by Microsoft.


Microsoft Exchange Server 5.0 SP2

• Microsoft Security Update for Exchange 5.0 Server (KB894689)
  http://www.microsoft.com/downloads/details.aspx?familyid=0A8DF1C3-ABF9 -4A21-9B49-81FA362B251F&displaylang=en

Microsoft Office XP SP3

• Microsoft Security Update for Office XP Multilingual User Interface Pack (KB892841)
  Fix for Microsoft Office XP Multilingual User Interface Packs.
  http://www.microsoft.com/downloads/details.aspx?familyid=CCA9399A-6DA3 -4163-8398-C58DC328182B&displaylang=en


• Microsoft Security Update for Outlook 2002 (KB892841)
  Fix for Microsoft Outlook 2002.
  http://www.microsoft.com/downloads/details.aspx?familyid=9A85CEBB-0D9A -465D-A4BC-AF501562772D&displaylang=en

Microsoft Office 2003 SP2

• Microsoft Office 2003 Service Pack 2 for Language Interface Pack
  Fix for Microsoft Office 2003 Language Interface Packs.
  http://www.microsoft.com/downloads/details.aspx?familyid=db080de8-8193 -4c32-9019-9980ecd6874a&displaylang=en


• Microsoft Security Update for Office 2003 Multilingual User Interface Pack (KB892843)
  Fix for Microsoft Office 2003 Multilingual User Interface Packs.
  http://www.microsoft.com/downloads/details.aspx?familyid=D69554AD-196F -4789-91E5-B2A753EED854&displaylang=en


• Microsoft Security Update for Outlook 2003 (KB892843)
  Fix for Microsoft Office Outlook 2003.
  http://www.microsoft.com/downloads/details.aspx?familyid=1D156043-B041 -4305-8442-3C4E3B832788&displaylang=en

Microsoft Office 2000 SP3

• Microsoft Security Update for Office 2000 Multilanguage Pack (KB892842)
  http://www.microsoft.com/downloads/details.aspx?familyid=2C0FA7C7-91AA -49B4-9731-9E83E3E0823D&displaylang=en


• Microsoft Security Update for Office 2000 Multilanguage Pack (KB892842)
  Fix for MultiLanguage Packs.
  http://www.microsoft.com/downloads/details.aspx?familyid=2C0FA7C7-91AA -49B4-9731-9E83E3E0823D&displaylang=en


• Microsoft Security Update for Outlook 2000 (KB892842)
  Fix for Microsoft Outlook 2000.
  http://www.microsoft.com/downloads/details.aspx?familyid=64D0336D-F962 -4AB1-A724-9F6BA2108CB9&displaylang=en

Microsoft Exchange Server 2000 SP3

• Microsoft Security Update for Exchange 2000 Server (KB894689)
  Fix for Microsoft Exchange 2000 Server Pack 3 with the Exchange 2000 Post-Service Pack 3 Update Rollup of August 2004.
  http://www.microsoft.com/downloads/details.aspx?familyid=372FF07F-C3CA -4301-8559-9B90344EDC02&displaylang=en

Microsoft Office 2003 SP1

• Microsoft Office 2003 Service Pack 2 for Language Interface Pack
  Fix for Microsoft Office 2003 Language Interface Packs.
  http://www.microsoft.com/downloads/details.aspx?familyid=db080de8-8193 -4c32-9019-9980ecd6874a&displaylang=en


• Microsoft Security Update for Office 2003 Multilingual User Interface Pack (KB892843)
  Fix for Microsoft Office 2003 Multilingual User Interface Packs.
  http://www.microsoft.com/downloads/details.aspx?familyid=D69554AD-196F -4789-91E5-B2A753EED854&displaylang=en


• Microsoft Security Update for Outlook 2003 (KB892843)
  Fix for Microsoft Office Outlook 2003.
  http://www.microsoft.com/downloads/details.aspx?familyid=1D156043-B041 -4305-8442-3C4E3B832788&displaylang=en

Microsoft Exchange Server 5.5 SP4

• Microsoft Security Update for Exchange Server 5.5 Service Pack 4 (KB894689)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=EC6BD30E-12DE -4CA1-9432-D2E73AF62427