Description
Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.
References
- 1018785 vdb-entry
- HPSBST02280 vendor-advisory
- oval:org.mitre.oval:def:1706 vdb-entry signature
- MS07-056 vendor-advisory
- 20071010 Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow mailing-list
- 20071009 Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow third-party-advisory
- ADV-2007-3436 vdb-entry
- 1018786 vdb-entry
- 25908 vdb-entry
- TA07-282A third-party-advisory
- 27112 third-party-advisory