Description
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
References
- oval:org.mitre.oval:def:1611 vdb-entry signature
- oval:org.mitre.oval:def:812 vdb-entry signature
- 1015898 vdb-entry
- 691 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-007.html
- oval:org.mitre.oval:def:1682 vdb-entry signature
- outlook-express-wab-bo(25535) vdb-entry
- MS06-016 vendor-advisory
- 20060411 ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability mailing-list
- 17459 vdb-entry
- oval:org.mitre.oval:def:1769 vdb-entry signature
- oval:org.mitre.oval:def:1780 vdb-entry signature
- oval:org.mitre.oval:def:1791 vdb-entry signature
- oval:org.mitre.oval:def:1771 vdb-entry signature
- 19617 third-party-advisory
- 20060411 ZDI-06-007: Microsoft Windows Address Book (WAB) File Format Parsing Vulnerability mailing-list
- ADV-2006-1321 vdb-entry