Slashdot Mirror
New Outlook Bug Doesn't Require Users To Interact With Emails To Be Compromised (softpedia.com)
An anonymous reader writes: A new bug in Outlook allows attackers only to send you an email, and without clicking or downloading attachments, a user's computer can be compromised. The bug [PDF] is because Outlook allows Flash objects to be previewed without a sandbox. Flash files are demon spawns and attackers can put exploits in malicious files, which when previewed or viewed inside an Outlook application will automatically execute their payload.
my copy of Outlook doesn't download or render attachments (or even images) unless told to
That's why Lotus Notes is so amazing. Even when you tell it to, it doesn't download or render things. Security by mediocrity.
lucm, indeed.
This is what happens when companies require their workers to delete mails that are over 6 months old.
Il n'y a pas de Planet B.
Not really. The proposed new name is LookOut!
I ran into that a decade ago when my client needed to get me some data. But fortunately the company let their corporate secrets be written to a CD, instead.
Well, the fortune cookie did say "Outlook not so good".
Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
The only reason that I use Outlook is that I want to be compromised.
I'm an American. I love this country and the freedoms that we used to have.