OL97: Outlook 8.02 Security Improvements

This article describes Microsoft Outlook 97, version 8.02, security Improvements in these areas.

• Form attachments
• View attachments
• Hyperlinks to folders or network shares
• Opening or saving a file from a hyperlink
• OLE embedded objects

Form Attachments

It is not possible to send a form that will automatically execute an attached file without warning the recipient of the form.

View Attachments

You cannot view attachments that are executable files without receiving a security warning. Follow these steps to see this issue:

1. Start a version of Outlook earlier than 8.02.
2. On the Tools menu, click Options and then click the Attachments tab. Verify that the Security Method is set to High and click OK.
3. Have someone send you a message that contains an executable file attachment.
4. In your list view, using your right mouse button click the e-mail message that contains the executable attachment from step 3 and on the context-sensitive menu, click View Attachments and then click the name of the executable attachment.
5. Note that the executable file runs without any security warning to the user.

Hyperlinks to Folders or Network Shares

If you click a hyperlink to a folder or network share, you no longer receive a security warning. However, if the hyperlink does not end with a training slash, you will receive a security warning since Outlook cannot determine if the hyperlink is to a file or a folder.

Opening or Saving a File from a Hyperlink

If you click a hyperlink to a file, you receive a security warning and the option to open or save the file. In the past the option to save or open the file was unavailable (grayed out). The new behavior is more like the behavior of Microsoft Internet Explorer.

OLE Embedded Objects

Outlook provides improved security from OLE objects in Outlook items. You will receive a security warning when you attempt to open an item that contains a potentially unsafe OLE embedded object.