NVD

Id
2956  
Name
CVE-2008-3068  
Description
Microsoft Crypto API 5.131.2600.2180 through 6.0, as used in Outlook, Windows Live Mail, and Office 2007, performs Certificate Revocation List (CRL) checks by using an arbitrary URL from a certificate embedded in a (1) S/MIME e-mail message or (2) signed document, which allows remote attackers to obtain reading times and IP addresses of recipients, and port-scan results, via a crafted certificate with an Authority Information Access (AIA) extension.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-07-07  
Modified Date
2012-10-30  
Seq
2008-3068  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18608 2956 CVE-2008-3068 3978  View
18609 2956 CVE-2008-3068 20080703 Unauthorized reading confirmation from Outlook  View
18610 2956 CVE-2008-3068 20080709 Re: Unauthorized reading confirmation from Outlook  View
18611 2956 CVE-2008-3068 28548  View
18612 2956 CVE-2008-3068 1019736  View
18613 2956 CVE-2008-3068 1019737  View
18614 2956 CVE-2008-3068 1019738  View
18615 2956 CVE-2008-3068 https://www.cynops.de/advisories/AKLINK-SA-2008-002.txt  View
18616 2956 CVE-2008-3068 https://www.cynops.de/advisories/AKLINK-SA-2008-003.txt  View
18617 2956 CVE-2008-3068 https://www.cynops.de/advisories/AKLINK-SA-2008-004.txt  View
18618 2956 CVE-2008-3068 https://www.cynops.de/techzone/http_over_x509.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
49309 JVNDB-2008-004619 Outlook などで使用される Microsoft Crypto API におけるポートスキャンの結果を取得される脆弱性 Outlook、Windows Live Mail および Office 2007 で使用される Microsoft Crypto API は、(1) S/MIME の電子メールメッセージまたは (2) 符号化された文書が組み込まれた証明書からの任意の URL を使用することで Certificate Revocation List (CRL) チェックを実行するため、受信者の読み時間および IP アドレス、ポートスキャンの結果を取得される脆弱性が存在します。 CVE-2008-3068 33181 CVE-2008-3068 2956 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004619.html 2008-07-07 2012-09-25 View