Outlook Express NNTP LIST buffer overflow

Added: 05/04/2006 CVE: CVE-2005-1213 BID: 13951 OSVDB: 17306 Background Outlook Express is a free e-mail client which is included in Windows operating systems. Problem A buffer overflow in Outlook Express allows command execution when processing responses from NNTP servers to LIST commands...

Outlook Express NNTP LIST buffer overflow

Added: 05/04/2006 CVE: CVE-2005-1213 BID: 13951 OSVDB: 17306 Background Outlook Express is a free e-mail client which is included in Windows operating systems. Problem A buffer overflow in Outlook Express allows command execution when processing responses from NNTP servers to LIST commands...

FileProtection Express <= 1.0.1 authentification bypass

FileProtection Express = 1.0.1 authentification bypass Discovered by: Nomenumbra Date: 5/2/2006 impact:high privilege escalation,full file access Ok, this is absurd, the only form of authentification to the Admin panel is controlled by a cookie value. Use firefox CookieEditor extension for exampl...

Unauthorized Cisco Unity Express access

It's possible to change password without entering old one if account is expired...

[Full-disclosure] Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Cisco Security Advisory: Cisco Unity Express Expired Password Reset Privilege Escalation Advisory ID: cisco-sa-20060501-cue http://www.cisco.com/warp/public/707/cisco-sa-20060501-cue.shtml Revision 1.0 For Public Release 2006 May 01 2300 UTC GMT...

Cisco Unity Express Expired Password Reset Privilege Escalation

THIS DOCUMENT IS PROVIDED ON AN "AS IS" BASIS AND DOES NOT IMPLY ANY KIND OF GUARANTEE OR WARRANTY, INCLUDING THE WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR USE. YOUR USE OF THE INFORMATION ON THE DOCUMENT OR MATERIALS LINKED FROM THE DOCUMENT IS AT YOUR OWN RISK. CISCO RESERVES TH...

CVE-2006-2111

A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...

Information disclosure

A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...

CVE-2006-2111

CVE-2006-2111 describes an information disclosure flaw in the Windows MHTML URL handler used by Outlook Express/Windows Mail. The vulnerability arises because the MHTML protocol handler misinterprets redirections (MHTML://) and could allow a remote attacker to bypass Internet Explorer domain rest...

CVE-2006-2111

A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as originally reported for Internet Explorer 6 and 7, aka "URL Redirect Cross Domain Information Disclosure Vulnerability...

Outlook Express 5.5/6.0 / Windows Mail - MHTML URI Handler Information Disclosure

source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties of a site in an arbitrary external domain in the context of the victim user's...

Outlook Express 5.56.0 Windows Mail - MHTML URI Handler Information Disclosure

Outlook Express 5.56.0 Windows Mail - MHTML URI Handler Information Disclosure source: https://www.securityfocus.com/bid/17717/info Outlook Express and Windows Mail are prone to a cross-domain information-disclosure vulnerability. This vulnerability may let a malicious website access properties o...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Microsoft Outlook Express buffer overflow

Buffer overflow on parsing WAB address book...

CVE-2006-0014

The CVE-2006-0014 entry maps to Microsoft Outlook Express (OE) using the Windows Address Book (.wab) file. The underlying flaw is an unchecked buffer/heap corruption caused by parsing malformed .wab files, specifically due to modifications of Unicode string lengths during WAB parsing. This can al...

CVE-2006-0014

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book WAB file containing "certain Unicode strings" and modified length values...

Microsoft Security Bulletin MS06-016 Cumulative Security Update for Outlook Express (911567)

Microsoft Security Bulletin MS06-016 Cumulative Security Update for Outlook Express 911567 Published: April 11, 2006 Version: 1.0 Summary Who should read this document: Customers who use Microsoft Outlook Express Impact of Vulnerability: Remote Code Execution Maximum Severity Rating: Important...

MS06-016: Vulnerability in Outlook Express Could Allow Remote Code Execution (911567)

The remote host is running a version of Microsoft Outlook Express that may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to send a malformed Windows Address Book .wab file to a victim on the remote host and have him open the file. C...

Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability

Description Microsoft Outlook Express is prone to a remote buffer-overflow vulnerability. This vulnerability presets itself when the application processes a specially crafted Windows Address Book .wab file. An attacker may exploit this issue to execute arbitrary code in the context of a user...

Update Protection against Microsoft Outlook Express Windows Address Book File Vulnerability (MS06-016)

Microsoft Outlook Express is a commonly used email application. A vulnerability has been discovered in the file which contains the address book of Outlook Express, potentially allowing a malicious attacker to take control of the affected machine...