New Outlook Bug Doesn't Require Users To Interact With Emails To Be Compromised - Slashdot

New Outlook Bug Doesn't Require Users To Interact With Emails To Be Compromised - Slashdot:
"The bug is because Outlook allows Flash objects to be previewed without a Sandbox".

More details here:
http://news.softpedia.com/news/badwinmail-microsoft-outlook-bug-can-give-attackers-control-over-pcs-497795.shtml

PDF Here:
https://sites.google.com/site/zerodayresearch/BadWinmail.pdf?attredirects=0

'via Blog this'