Security Updates for Outlook C2R Information Disclosure (December 2023)

Language:

Version 1.6 Apr 8, 2024, 2:16 PM Plugin metadata (updated to long-month name) Plugin Feed: 202404081416
Version 1.5 Feb 21, 2024, 4:36 PM Logic Changes (proper version) Plugin Feed: 202402211636
Version 1.4 Jan 23, 2024, 3:21 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True". "Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202401231521
Version 1.3 Jan 12, 2024, 11:48 AM IAVM reference Plugin Feed: 202401121148
Version 1.2 Dec 15, 2023, 2:39 PM CVSS metrics ("CVSSv2 score" set to 7.8. "CVSSv2 vector" set to "CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N". "CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N". "CVSSv3 score" set to 6.5) CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:U/RL:OF/RC:C". "CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 severity (based on CVE-2023-35636, severity increased from "Medium" to "High") Exploit attributes ("Exploit available" set to "False". "Exploitability ease" set to "No known exploits are available") IAVM reference Plugin Feed: 202312151439
Version 1.0 Dec 14, 2023, 9:42 PM New Plugin Feed: 202312142142
Version 1.0 Dec 15, 2023, 12:19 PM IAVM reference Plugin Feed: 202312151219

* Changelogs are generally available for changes made after Nov 1, 2022