Microsoft Outlook Express and Windows Mail Integer Overflow Vulnerability( 12 May 2010 )

Last Update Date: 28 Jan 2011 Release Date: 12 May 2010 4545 Views

RISK: Medium Risk

Medium Risk

An unauthenticated remote code execution vulnerability exists in the way that Windows Mail Client handles specially crafted mail responses. An attempt to exploit the vulnerability would not require authentication, allowing an attacker to exploit the vulnerability by sending a specially crafted response to a client initiating a connection to a server under his control using the common mail protocols POP3 and IMAP.

Impact

  • Remote Code Execution

System / Technologies affected

  • Microsoft Windows 2000
  • Windows XP
  • Windows Server 2003
  • Windows Vista
  • Windows Server 2008
  • Windows 7
  • Microsoft Outlook Express 5.5
  • Microsoft Outlook Express 6
  • Windows Mail
  • Windows Live Mail

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download locations for this patch

Vulnerability Identifier

Source

Related Link

Share with

Previous

Microsoft Visual Basic for Applications VBE6.DLL Stack Memory Corruption Vulnerability( 12 May 2010 )

12 May 2010 4375 Views

Next

IrfanView PSD Image Parsing Multiple Vulnerabilities

13 May 2010 4476 Views

We use cookies to give you the best possible experience on our website. By continuing to browse this site, you give consent for cookies to be used. For more details please read our Cookie Policy.

PRIVACY POLICY