Microsoft Office Outlook Denial of Service Vulnerability

This host is installed with Microsoft Office Outlook and is prone to denial of service vulnerability.

The flaw is due to the XML parser in Microsoft Office does not properly detect recursion during entity expansion.

Microsoft Outlook 2007 Microsoft Outlook 2010 Microsoft Outlook 2013.

Checks if a vulnerable version is present on the target host.

A workaround is to add a rule blocking XML DTD Entities ('<!ENTITY', case-insensitive) to your spam filter. Creating an Outlook rule to permanently delete messages containing '<!ENTITY' also mitigates the attack.