Test ID:	1.3.6.1.4.1.25623.1.0.811836
Category:	Denial of Service
Title:	Microsoft Office Outlook Denial of Service Vulnerability
Summary:	Microsoft Office Outlook is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Microsoft Office Outlook is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw is due to the XML parser in Microsoft Office does not properly detect recursion during entity expansion. Vulnerability Impact: Successful exploitation will allow remote attackers to cause a denial of service (memory consumption and persistent application hang) via a crafted XML document. Affected Software/OS: - Microsoft Outlook 2007 - Microsoft Outlook 2010 - Microsoft Outlook 2013 Solution: A workaround is to add a rule blocking XML DTD Entities (' an Outlook rule to permanently delete messages containing ' mitigates the attack. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-2730 Bugtraq: 20140403 [softScheck] Denial of Service in Microsoft Office 2007-2013 (Google Search) http://www.securityfocus.com/archive/1/531722/100/0/threaded
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.