Some vulnerabilities have been reported in Microsoft Outlook, which can be exploited by malicious people to cause a DoS (Denial of Service) or compromise a user's system.

1) An error within the processing of VEVENT records can be exploited to corrupt memory via a specially crafted .ICS (iCal) meeting request.

Successful exploitation allows execution of arbitrary code.

2) An error within the processing of e-mail header information can be exploited to crash the mail client via a specially crafted e-mail. In order to restore functionality, the malicious e-mail has to be removed manually from the mail server.

3) An error within the processing of Office Saved Searches (.oss) files can be exploited to corrupt memory by tricking a user into opening a specially crafted .oss file.

Successful exploitation allows execution of arbitrary code.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) Lurene Grenier, Sourcefire.
2) Reported by the vendor.
3) Stuart Pearson, Computer Terrorism.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-003 (KB925938):
http://www.microsoft.com/technet/security/Bulletin/MS07-003.mspx

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers