Microsoft Windows Vista Windows Mail File Execution (MS07-034; CVE-2007-1658)

Microsoft Windows Mail product is an implementation of an email and newsgroup client capable of handling most standard Internet protocols as well as numerous proprietary Microsoft protocols and formats. It is the successor to Outlook Express and is included in recent versions of Microsoft Windows...

CVE-2007-1658

CVE-2007-1658 affects Windows Mail in Windows Vista. The vulnerability arises from improper handling of local/UNC navigation links (UNC/local file paths) in Windows Mail, allowing a remote attacker to execute arbitrary code when a user clicks a crafted link in an email. The underlying root cause ...