Lucene search
SAINT CorporationSAINT:3E2944089B2233537FB05BC93AE54E50HistoryMay 04, 2006 - 12:00 a.m.
Outlook Express NNTP LIST buffer overflow
2006-05-0400:00:00
SAINT Corporation
www.saintcorporation.com
16
EPSS
0.974
Percentile
99.9%
Added: 05/04/2006
CVE: CVE-2005-1213
BID: 13951
OSVDB: 17306
Background
Outlook Express is a free e-mail client which is included in Windows operating systems.
Problem
A buffer overflow in Outlook Express allows command execution when processing responses from NNTP servers to LIST commands.
Resolution
Apply the patch referenced in Microsoft Security Bulletin 05-030.
References
<http://www.idefense.com/intelligence/vulnerabilities/display.php?id=263>
Limitations
Exploit works on Outlook Express 5.5 and 6.0. Successful exploitation requires a user to open the exploit in Outlook Express using a URL such as **news://IP_Address**.
Platforms
Windows 2000
Windows XP
Related
checkpoint_advisories
checkpoint_advisories
Microsoft Outlook Express NNTP handler Buffer Overflow (CVE-2005-1213)
2016-03-20 00:00:00
NNTP (CVE-2004-0574; CVE-2005-1213)
2005-07-06 00:00:00
securityvulns
securityvulns
cvelist
cvelist
CVE-2005-1213
2005-06-14 04:00:00
nvd
nvd
CVE-2005-1213
2005-06-14 04:00:00
cert
cert
Microsoft Outlook Express vulnerable to remote code execution
2005-06-14 00:00:00
cve
cve
CVE-2005-1213
2005-06-14 04:00:00
exploitdb
exploitdb
Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)
2005-06-24 00:00:00
seebug
seebug
MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)
2005-06-24 00:00:00
metasploit
metasploit
MS05-030 Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
2006-12-15 15:28:00
saint
saint
Outlook Express NNTP LIST buffer overflow
2006-05-04 00:00:00
Outlook Express NNTP LIST buffer overflow
2006-05-04 00:00:00
Outlook Express NNTP LIST buffer overflow
2006-05-04 00:00:00
packetstorm
packetstorm
Microsoft Outlook Express NNTP Response Parsing Buffer Overflow
2009-11-26 00:00:00
nessus
nessus