3781 matches found
CVE-2005-2226
Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive information...
MS KB900930: Microsoft Outlook Express Multiple Vulnerabilities
The remote host runs a version of Outlook Express that contains multiple vulnerabilities. An attacker may exploit these vulnerabilities to disable the Outlook Express client of a victim. To exploit these issues, an attacker would need to send a malformed email message to a victim and wait for him...
Outlook Express Multiple DoS
Binary data 3062.prm...
Microsoft Outlook Express Multiple Vulnerabilities
Description Microsoft has released an update to address various issues affecting Outlook Express 6.0 running on Windows XP. These issues may allow remote attackers to cause the client to crash or disclose sensitive information. Reportedly remote attackers may cause the client to crash by sending...
CVE-2004-2147
The CVE-2004-2147 entry describes a DoS against unknown versions of Symantec Norton AntiVirus and Microsoft Outlook caused by malformed e‑mail messages that lack a body or lack a carriage return separating headers from the body. Connected documents do not add details on affected versions, root ca...
Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)
Microsoft Outlook Express - NNTP Buffer Overflow MS05-030 include include include include pragma commentlib,"ws232" / win32bind - EXITFUNC=process LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char scode =...
Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)
include include include include pragma commentlib,"ws232" / win32bind - EXITFUNC=process LPORT=4444 Size=344 Encoder=PexFnstenvSub http://metasploit.com / unsigned char scode = "\x31\xc9\x83\xe9\xb0\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x96"...
MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)
Exploit for unknown platform in category remote exploits ========================================================== MS Outlook Express NNTP Buffer Overflow Exploit MS05-030 ========================================================== include include include include pragma commentlib,"ws232" /...
MS Outlook Express NNTP Buffer Overflow Exploit (MS05-030)
漏洞描述：Microsoft Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。Microsoft Outlook Express的新闻阅读功能中存在远程缓冲区溢出漏洞，可能允许攻击者以当前用户的权限执行任意代码。 具体的说，在发布LIST命令后解析NNTP服务器响应时会触发这个漏洞。位于C:\Program Files\Outlook Express\MSOE.DLL的MSOE.dll中的一个例程中存在栈溢出。以下地址和偏移基于Microsoft Windows 2000 SP4捆绑的MSOE.DLL...
CVE-2002-1696
Microsoft Outlook plug-in PGP version 7.0, 7.0.3, and 7.0.4 silently saves a decrypted copy of a message to hard disk when "Automatically decrypt/verify when opening messages" option is checked, "Always use Secure Viewer when decrypting" option is not checked, and the user replies to an encrypted...
CVE-2002-1777
NOTE: this issue has been disputed by the vendor. Symantec Norton AntiVirus NAV 2002 allows remote attackers to bypass e-mail scanning via a filename in the Content-Type field with an excluded extension such as .nch or .dbx, but a malicious extension in the Content-Disposition field, which is use...
CVE-2002-1696
The CVE concerns Microsoft Outlook plug-in PGP 7.0, 7.0.3, and 7.0.4. When the user replies to an encrypted message with the option “Automatically decrypt/verify when opening messages” enabled and “Always use Secure Viewer when decrypting” disabled, a decrypted copy of the message is silently sav...
Microsoft Outlook Express NNTP client buffer overflow
Buffer overflow on NNTP server reply parsing...
Outlook Web Access with Exchange 5.5 SP4 XSS
Binary data 3014.prm...
Microsoft Outlook Web Access crossite scripting
It's possible to inject script into message and to acces username/password...
Outlook Express NNTP LIST Command Remote Overflow
Binary data 3013.prm...
High Risk Vulnerability in HTML Help (ITSS Parser)
Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in one of the dependencies of HTML Help, the InfoTech Storage System parser. This flaw can permit arbitrary code execution through a number of applications including HTML Help, Internet Explorer and Outlook/Outlook Express...
iDEFENSE Security Advisory 06.14.05: Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability
Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability iDEFENSE Security Advisory 06.14.05 www.idefense.com/application/poi/display?id=263&type=vulnerabilities June 14, 2005 I. BACKGROUND Microsoft Outlook Express is an e-mail and newsgroup client shipped with the Microsoft...
Microsoft Security Bulletin MS05-029 Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks (895179)
Microsoft Security Bulletin MS05-029 Vulnerability in Outlook Web Access for Exchange Server 5.5 Could Allow Cross-Site Scripting Attacks 895179 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: System administrators who have servers that are running Outlook Web Access for...
Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express (897715)
Microsoft Security Bulletin MS05-030 Cumulative Security Update in Outlook Express 897715 Issued: June 14, 2005 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...