CVE-2007-3897 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2007-3897
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2007-3897

Description: Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.

CVE Status: Candidate

References: ST 1018785 1018786 SAID Secunia Advisory: SA27112 OVAL http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1706 MS http://www.microsoft.com/technet/security/bulletin/ms07-056.mspx IDEFENSE http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=607 HP http://www.securityfocus.com/archive/1/archive/1/482366/100/0/threaded CERT http://www.us-cert.gov/cas/techalerts/TA07-282A.html BUGTRAQ http://www.securityfocus.com/archive/1/archive/1/481983/100/100/threaded BID 25908

Return to the previous page.