Description
Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Exploit-DB 1
- Microsoft Windows Outlook Express and Windows Mail - Integer Overflow EDB-12564 · dos · May 11, 2010 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=13&Itemid=13
- MS10-030 vendor-advisory
- TA10-131A third-party-advisory
- 20100511 {PRL} Microsoft Windows Outlook Express and Windows Mail Integer Overflow mailing-list
- oval:org.mitre.oval:def:6734 vdb-entry signature
- 40052 vdb-entry