Heap-based buffer overflow in Microsoft Outlook Express and Windows Mail
CVE-2007-3897

Currently unrated

Key Information:

Vendor
Microsoft
Vendor
CVE Published:
9 October 2007

Summary

A heap-based buffer overflow exists in Microsoft Outlook Express and Windows Mail that could allow an attacker to execute arbitrary code on the system. This vulnerability arises when processing long responses from remote Network News Transfer Protocol (NNTP) servers, leading to potential memory corruption. A successful exploit could permit unauthorized control over the affected application, thereby compromising system integrity.

References

EPSS Score

64% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.