CVE-2002-1179 Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, whi...
HighCVSS 7.5
EPSS 22.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a long "From" address, which triggers the overflow when the user views or previews the message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft outlook express | = 5.5 | No fix listed |
| Microsoft outlook express | = 6.0 | No fix listed |
References
- 20021010 Outlook Express Remote Code Execution in Preview Pane (S/MIME) mailing-list
- 20021010 Outlook Express Remote Code Execution in Preview Pane (S/MIME) mailing-list
- 20021010 Re: Problems applying MS02-058 mailing-list
- outlook-smime-bo(10338) vdb-entry vendor-advisory
- 5944 vdb-entry
- MS02-058 vendor-advisory