A vulnerability has been reported in Microsoft Outlook, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error when handling a specially crafted "mailto:" URI passed from a web browser. This can be exploited to pass extra command line switches to Outlook.

Successful exploitation allows execution of arbitrary code when a user e.g. visits a malicious website.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Greg MacManus, iDefense Labs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS08-015 (KB949031):
http://www.microsoft.com/technet/security/Bulletin/MS08-015.mspx

iDefense Labs:
http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=673

Other references
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers