CVE-2007-3897 Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP r...
HighCVSS 9.3
EPSS 54.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft outlook express | <= 6.0 | No fix listed |
| Microsoft outlook express | = 6.0-sp1 | No fix listed |
| Microsoft windows mail | All versions | No fix listed |
References
- 20071009 Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow broken-link third-party-advisory
- 27112 third-party-advisory
- 1018785 third-party-advisory vdb-entry
- 1018786 third-party-advisory vdb-entry
- 20071010 Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow mailing-list third-party-advisory vdb-entry
- HPSBST02280 third-party-advisory vdb-entry vendor-advisory
- 25908 third-party-advisory vdb-entry
- TA07-282A third-party-advisory us-government-resource
- ADV-2007-3436 permissions-required third-party-advisory vdb-entry
- MS07-056 patch vendor-advisory
- oval:org.mitre.oval:def:1706 signature third-party-advisory vdb-entry