Summary
Impact: Spoofing. Microsoft rating: Important. Not known to be exploited — Exploitation Less Likely. Customer action: Required.
Details
What type of information could be disclosed by this vulnerability?
Exploiting this vulnerability could allow the disclosure of NTLM hashes.
How could an attacker exploit this vulnerability?
External attackers could send specially crafted emails that will cause a connection from the victim to an untrusted location of attackers' control. This will leak the Net-NTLMv2 hash of the victim to the untrusted network which an attacker can then relay to another service and authenticate as the victim.
According to the CVSS metric, user interaction is required (UI:R). What interaction would the user have to do?
An attacker would have to send the victim a malicious URL that the victim would have to execute.
Security updates
1.2023.0322.0100 — https://apps.microsoft.com/detail/9nrx63209r7b?cid=cmmdoli6tgo&hl=en-us&gl=US
Vulnerabilities 1
-
High 8.1
Outlook for Windows Spoofing Vulnerability
Outlook for Windows Spoofing Vulnerability
Revision history
-
#1
Information published.
References
-
CVE-2024-20670 Outlook for Windows Spoofing Vulnerability - HTML
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-20670
-
Microsoft Exploitability Index
https://www.microsoft.com/en-us/msrc/exploitability-index?rtc=1
-
Microsoft Support Lifecycle
https://support.microsoft.com/lifecycle
-
Common Vulnerability Scoring System
https://www.first.org/cvss