CVE-2007-3896

The URL handling in Shell32.dll in the Windows shell in Microsoft Windows XP and Server 2003, with Internet Explorer 7 installed, allows remote attackers to execute arbitrary programs via invalid "%" sequences in a mailto: or other URI handler, as demonstrated using mIRC, Outlook, Firefox, Adobe...

IPS-1 Protection for Outlook NNTP Vulnerability (CVE-2007-3897/MS07-056)

Several versions of Microsoft Outlook have vulnerabilities in their handling of NNTP headers that could result in arbitrary code execution...

CVE-2007-3896

CVE-2007-3896 affects Windows Shell32 (Windows XP/Server 2003 with IE7) where URL handling in the shell misparses invalid % sequences in mailto: or other URI handlers, allowing remote code execution. The issue can be triggered by launching external programs via URI handlers invoked by application...

iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow

Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow iDefense Security Advisory 10.09.07 http://labs.idefense.com/intelligence/vulnerabilities/ Oct 09, 2007 I. BACKGROUND Microsoft Windows Mail and Outlook Express are the default mail and news clients for Windows operating...

Microsoft Outlook Express / Windows Mail NNTP buffer overflow

Heap memory overflow on NNTP server reply parsing...

Microsoft Security Bulletin MS07-056 - Critical Security Update for Outlook Express and Windows Mail (941202)

Microsoft Security Bulletin MS07-056 - Critical Security Update for Outlook Express and Windows Mail 941202 Published: October 9, 2007 Version: 1.0 General Information Executive Summary This critical security update resolves one privately reported vulnerability. The vulnerability could allow remo...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)

Binary data 4232.prm...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)

Binary data 4233.prm...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)

Binary data 4235.prm...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)

Binary data 4234.prm...

Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)

Binary data 4236.prm...

Heap overflow

Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol NNTP servers to execute arbitrary code via long NNTP responses that trigger memory corruption...

CVE-2007-3897

Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol NNTP servers to execute arbitrary code via long NNTP responses that trigger memory corruption...

CVE-2007-3897

CVE-2007-3897 corresponds to a heap-based buffer overflow in the NNTP handling of Microsoft Outlook Express (versions up to 6) and Windows Mail (Vista). The vulnerability arises when processing NNTP replies that return more data than requested, allowing attacker-controlled data to overflow the al...

CVE-2007-3897

Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol NNTP servers to execute arbitrary code via long NNTP responses that trigger memory corruption...

MS07-056: Cumulative Security Update for Outlook Express and Windows Mail (941202)

The remote host is running a version of Microsoft Outlook Express that contains several security flaws that could allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed email to a victim on the remote host and have him open...

Microsoft Outlook Express And Windows Mail NNTP Protocol Heap Buffer Overflow Vulnerability

Description Microsoft Outlook Express and Windows Mail are prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the applications fail to perform adequate boundary-checks on user-supplied data. Successfully exploiting this issue will allow an attacker to execute...

CVE-2004-2694

CVE-2004-2694 affects Microsoft Outlook Express 6.0. The vulnerability allows remote attackers to bypass access restrictions and load content from arbitrary sources into the Outlook context via a BASE HREF with target set to _top, enabling phishing-like content injection. This is described across...

CVE-2004-2694

Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing attacks via a "BASE HREF" with the target set to "top"...

MS07-050: Vulnerability in Vector Markup Language Could Allow Remote Code Execution (938127)

The remote host is running a version of Internet Explorer or Outlook Express with a bug in the Vector Markup Language VML handling routine that may allow an attacker execute arbitrary code on the remote host by sending a specially crafted email or by luring a user on the remote host into visiting...