Description
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
References
- ADV-2007-0104 vdb-entry
- TA07-009A third-party-advisory
- 23674 third-party-advisory
- HPSBST02184 vendor-advisory
- [funsec] 20060308 DOSing Outlook 2003 mailing-list
- 31253 vdb-entry
- 1017488 vdb-entry
- MS07-003 vendor-advisory
- VU#617436 third-party-advisory
- 21937 vdb-entry
- http://osvdb.org/ref/24/24081-outlook1.txt
- oval:org.mitre.oval:def:122 vdb-entry signature
- http://blogs.securiteam.com/index.php/archives/347