Buffer Overflow Vulnerability in Microsoft Outlook Express by Microsoft

CVE-2006-0014

What is CVE-2006-0014?

Microsoft Outlook Express 5.5 and 6 are vulnerable to a buffer overflow issue, where attackers can exploit a crafted Windows Address Book (WAB) file. This exploit involves using specific Unicode strings and altered length values, potentially allowing unauthorized execution of arbitrary code remotely. Proper precautions should be taken to avoid opening untrusted WAB files.

References