Secunia

Francis Provencher has discovered a vulnerability in Microsoft Outlook Express and Windows Mail, which can be exploited by malicious people to potentially compromise a user's system.

The vulnerability is caused due to an integer overflow when processing responses received from a POP3 server. This can be exploited to dereference out-of-bounds memory and potentially trigger a memory corruption via a specially crafted STAT response.

Successful exploitation may allow execution of arbitrary code, but requires that the user is tricked into connecting to a malicious POP3 server.

The vulnerability is confirmed in Outlook Express on a fully patched Windows 2000, Windows XP SP3, and Windows Server 2003, and in Windows Mail on a fully patched Windows Server 2008. Windows Mail in Windows Vista is also reportedly affected.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Francis Provencher, Protek Research Lab's.

Changelog
Further details available in Customer Area

Original Advisory
MS10-030 (KB978542):
http://www.microsoft.com/technet/security/bulletin/ms10-030.mspx

Francis Provencher:
http://www.protekresearchlab.com/index.php?option=com_content&view=article&id=13&Itemid=13

Other references
Further details available in Customer Area

Technical Analysis
Further details available in Customer Area

Deep Links
Links available in Customer Area