Buffer Overflow in Microsoft Outlook Express S/MIME Parsing

CVE-2002-1179

Summary

A buffer overflow vulnerability exists in the S/MIME parsing functionality of Microsoft Outlook Express 5.5 and 6.0. This flaw allows remote attackers to execute arbitrary code on a victim’s system by sending a specially crafted digital email. Specifically, a long 'From' address in the email can trigger the overflow when the user views or previews the message, potentially compromising the user's machine and data.

References