Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2008-5424
HistoryDec 11, 2008 - 3:30 p.m.

CVE-2008-5424

2008-12-1115:30:00
CWE-399
[email protected]
web.nvd.nist.gov
22
cve-2008-5424
mimeolecleardirtytree function
inetcomm.dll
outlook express
denial of service
nvd
security vulnerability

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.349 Low

EPSS

Percentile

97.1%

JSON

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many “Content-type: message/rfc822;” headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173.

Affected configurations

NVD
Node
microsoftoutlook_expressMatch6.00.2900.5512

Related

prion 9
nvd 9
cvelist 9
openvas 12
cert 1
debian 2
nessus 21
centos 2
freebsd 1
debiancve 1
securityvulns 1
suse 1
cve 8
redhat 1
ubuntucve 2
freebsd_advisory 1
gentoo 1
slackware 1
prion
prion
Design/Logic Flaw
2008-12-11 15:30:00
Stack overflow
2006-06-07 23:06:00
Design/Logic Flaw
2008-12-11 15:30:00
nvd
nvd
CVE-2008-5424
2008-12-11 15:30:00
CVE-2006-1173
2006-06-07 23:06:00
CVE-2008-5425
2008-12-11 15:30:00
cvelist
cvelist
CVE-2008-5424
2008-12-11 15:00:00
CVE-2006-1173
2006-06-07 23:00:00
CVE-2008-5425
2008-12-11 15:00:00
openvas
openvas
Microsoft Outlook Express Malformed MIME Message DoS Vulnerability
2008-12-18 00:00:00
Microsoft Outlook Express Malformed MIME Message DoS Vulnerability
2008-12-18 00:00:00
Debian Security Advisory DSA 1155-1 (sendmail)
2008-01-17 00:00:00
cert
cert
Sendmail fails to handle malformed multipart MIME messages
2006-06-14 00:00:00
debian
debian
[SECURITY] [DSA 1155-1] New sendmail packages fix denial of service
2006-08-24 06:23:59
[SECURITY] [DSA 1155-2] New sendmail packages fix denial of service
2006-08-24 09:16:49
nessus
nessus
Slackware 10.0 / 10.1 / 10.2 / 8.1 / 9.0 / 9.1 / current : sendmail (SSA:2006-166-01)
2006-06-16 00:00:00
AIX 5.2 TL 8 : bos.net.tcp.client (U806039)
2007-12-03 00:00:00
Solaris 10 (x86) : 122857-04
2006-04-21 00:00:00
centos
centos
sendmail security update
2006-06-18 23:46:01
sendmail security update
2006-06-14 21:17:41
freebsd
freebsd
sendmail -- Incorrect multipart message handling
2006-06-14 00:00:00
debiancve
debiancve
CVE-2006-1173
2006-06-07 23:06:00
securityvulns
securityvulns
DoS attacks on MIME-capable software via complex MIME emails
2008-12-09 00:00:00
suse
suse
remote denial of service in sendmail
2006-06-14 19:08:15
cve
cve
CVE-2006-1173
2006-06-07 23:06:00
CVE-2008-5425
2008-12-11 15:30:00
CVE-2008-5430
2008-12-13 08:40:08
redhat
redhat
(RHSA-2006:0515) sendmail security update
2006-06-14 00:00:00
ubuntucve
ubuntucve
CVE-2006-1173
2006-06-07 00:00:00
CVE-2008-5430
2008-12-13 00:00:00
freebsd_advisory
freebsd_advisory
FreeBSD-SA-06:17.sendmail
2006-06-14 00:00:00
gentoo
gentoo
Sendmail: Denial of service
2006-06-15 00:00:00
slackware
slackware
[slackware-security] sendmail
2006-06-15 08:39:54

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

7.3 High

AI Score

Confidence

High

0.349 Low

EPSS

Percentile

97.1%

JSON
Related for CVE-2008-5424
prion9nvd9cvelist9openvas12cert1debian2nessus21centos2freebsd1debiancve1securityvulns1suse1cve8redhat1ubuntucve2freebsd_advisory1gentoo1slackware1