Secunia Research has discovered a vulnerability in Microsoft Outlook, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an integer underflow error when parsing certain content and can be exploited to cause a heap-based buffer overflow via e.g. a specially crafted e-mail message.

Successful exploitation may allow execution of arbitrary code, but requires that Outlook is connected to an Exchange server with Online Mode (not default setting for Outlook 2003 and 2007).

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Dyon Balding, Secunia Research.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS10-064 (KB2288953, KB2293422, KB2293428, KB2315011):
http://www.microsoft.com/technet/security/bulletin/ms10-064.mspx

Secunia Research:
http://secunia.com/secunia_research/2009-15/

Technical Analysis
Further details available to Secunia VIM customers

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers