CVE-2010-0816

CVE-2010-0816 is a remote code execution vulnerability affecting Microsoft Outlook Express 5.5 SP2, 6, 6 SP1; Windows Live Mail on Windows XP SP2/SP3, Vista SP1/SP2, Windows Server 2008 (Gold, SP2, R2), and Windows 7; and Windows Mail on Vista SP1/SP2, Server 2008 (Gold, SP2, R2), and Windows 7. ...

CVE-2008-1448

Technical details for CVE-2008-1448 are not provided in the connected documents. Public details are limited to related CVEs; monitor for updates.

CVE-2007-2227

CVE-2007-2227 describes information disclosure in the MHTML protocol handler used by Outlook Express 6 and Windows Mail, which processes MHTML contents via Internet Explorer and ignores the Content-Disposition header. The vulnerability enables an attacker to obtain sensitive data from other IE do...

CVE-2007-2225

CVE-2007-2225 involves a cross-domain information disclosure in the MHTML URI handler used by Outlook Express 6 and Windows Mail (on Windows Vista). The vulnerability arises when the MHTML protocol handler processes HTTP headers, causing IE to bypass domain restrictions and potentially disclose d...

CVE-2007-3897

CVE-2007-3897 corresponds to a heap-based buffer overflow in the NNTP handling of Microsoft Outlook Express (versions up to 6) and Windows Mail (Vista). The vulnerability arises when processing NNTP replies that return more data than requested, allowing attacker-controlled data to overflow the al...

CVE-2018-8305

CVE-2018-8305 affects Windows Mail Client components (Mail, Calendar, and People) on Windows 8.1 App Store. The vulnerability is information disclosure that occurs when a user opens a crafted message; an attacker can trigger the client to disclose sensitive information to a malicious site/remote ...