Advertisement
If you have a new account but are having problems posting or verifying your account, please email us on hello@boards.ie for help. Thanks :)
Hello all! Please ensure that you are posting a new thread or question in the appropriate forum. The Feedback forum is overwhelmed with questions that are having to be moved elsewhere. If you need help to verify your account contact hello@boards.ie

MS Outlook 2002 Vulnerabilities

Options
  • 07-04-2002 10:49pm
    #1
    Alias Bob
    Closed Accounts Posts: 65 ✭✭


    Quote:


    Outlook flaws could give virus writers a field day


    US researcher pinpoints holes in Outlook 2002...

    The latest version of Microsoft's popular Outlook software has been shown to contain serious vulnerabilities which could leave users prone to viruses and hack attacks.

    Richard Smith, chief technology officer of the Denver-based security specialist Privacy Foundation, said he wanted users to be aware of the potential pitfalls of Outlook 2002.

    According to Smith, one of the biggest problems is the ability for an email that includes a special HTML tag known as an IFRAME to run an attached program without the user's knowledge.
    That weakness could be exploited to spread deadly viruses.

    Outlook can also run JavaScript in emails and gives users the ability to read and set cookies within the program - again, potential security problems.

    He also said Outlook generates unnecessary alert boxes - a "cry wolf" syndrome which leads to user complacency.

    The criticisms come just two months after Microsoft launched its Trustworthy Computing Initiative, driven by Bill Gates himself.

    Jan Guldentops a founding partner of open source security firm Better Access Labs, agreed with Smith but fuelled the Microsoft security debate further.

    "There is better email software available, but because Microsoft has a monopoly over the market, no one gets to use the more secure products available on the market," he said.

    Guldentops added that there are ways to make Outlook more secure: "There are a number of vendors who sell plug-ins for Outlook. You can build extra security on your mail server, but it does mean spending more money."

    Microsoft UK was unavailable for comment.

    Yours
    Alias Bob
    Don't forget my Guinness lads.
    :cool:


Advertisement