CVE-2017-0207
Microsoft Outlook Spoofing Vulnerability
CVE-2017-0207 is fixed in Microsoft Outlook for Mac 2011 on 1 platform by KB3212218 (version ), released April 11, 2017. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Moderate
Exploitation
None reported
Exploitation Unlikely
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.1049
95th percentile
<p>A spoofing vulnerability exists in when Microsoft Outlook for Mac improperly validates HTML tag input. An attacker who successfully tricked the user could gain access to the user's authentication information or login credentials.</p> <p>In an email attack scenario an attacker could exploit the vulnerability by sending an email with specific HTML tags, that could display a malicious authentication prompt.</p> <p>The security update addresses the vulnerability by correcting how Outlook for Mac sanitizes HTML tags.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Microsoft Outlook for Mac 2011 | KB3212218 | Apr 11, 2017 | |