OE
Product
Outlook Express
45
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch
Add Outlook Express to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2007-4040 | 8.8 | Jul 27 | Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting… Affected: All versions, or not specified |
| CVE-2010-3147 | – | Aug 27 | Untrusted search path vulnerability in wab.exe 6.00.2900.5512 in Windows Address Book in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2,… Affected: 6.00.2900.5512 |
| CVE-2010-0816 | – | May 12 | Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008… Affected: 5.5; 6.0; 6.0; 6.0; 6.0 |
| CVE-2008-5424 | – | Dec 11 | The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts… Affected: 6.00.2900.5512 |
| CVE-2008-1448 | – | Aug 13 | The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to… Affected: 5.5; 6.0; 6.0 |
| CVE-2007-3897 | – | Oct 9 | Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary… Affected: through 6.0; 6.0 |
| CVE-2007-2227 | – | Jun 12 | The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote… Affected: 6.0 |
| CVE-2007-2225 | – | Jun 12 | A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote… Affected: 6.0 |
| CVE-2006-2386 | – | Dec 13 | Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB)… Affected: 5.5; 6.0; 6.0; 6.0 |
| CVE-2006-2111 | – | May 1 | A component in Microsoft Outlook Express 6 allows remote attackers to bypass domain restrictions and obtain sensitive information via redirections with the mhtml: URI handler, as… Affected: 6.0 |
| CVE-2006-0014 | – | Apr 12 | Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode… Affected: 5.5; 5.5; 5.5; 6.0; 6.0 |
| CVE-2005-2226 | – | Jul 12 | Microsoft Outlook Express 6.0 leaks the default news server account when a user responds to a "watched" conversation thread, which could allow remote attackers to obtain sensitive… Affected: 6.0; 6.0; 6.0 |
| CVE-2005-1213 | – | Jun 14 | Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a… Affected: 5.5; 6.0; 6.0 |
| CVE-2004-2694 | – | Dec 31 | Microsoft Outlook Express 6.0 allows remote attackers to bypass intended access restrictions, load content from arbitrary sources into the Outlook context, and facilitate phishing… Affected: 6.0 |
| CVE-2004-2137 | – | Dec 31 | Outlook Express 6.0, when sending multipart e-mail messages using the "Break apart messages larger than" setting, leaks the BCC recipients of the message to the addresses listed… Affected: 6.0; 6.0 |
| CVE-2004-0526 | – | Aug 6 | Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the… Affected: 4.0; 4.01; 4.27.3110; 4.72.2106; 4.72.3120.0; 4.72.3612; +4 more |
| CVE-2004-0215 | – | Aug 6 | Microsoft Outlook Express 5.5 and 6 allows attackers to cause a denial of service (application crash) via a malformed e-mail header Affected: 6.0 |
| CVE-2004-0380 | – | May 4 | The MHTML protocol handler in Microsoft Outlook Express 5.5 SP2 through Outlook Express 6 SP1 allows remote attackers to bypass domain restrictions and execute arbitrary code, as… Affected: 5.5; 6.0 |
| CVE-2003-1378 | – | Dec 31 | Microsoft Outlook Express 6.0 and Outlook 2000, with the security zone set to Internet Zone, allows remote attackers to execute arbitrary programs via an HTML email with the… Affected: 6.0 |
| CVE-2003-0301 | – | Jun 16 | The IMAP Client for Outlook Express 6.00.2800.1106 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause… Affected: 6.00.2800.1106 |
| CVE-2003-0300 | – | Jun 16 | The IMAP Client for Sylpheed 0.8.11 allows remote malicious IMAP servers to cause a denial of service (crash) via certain large literal size values that cause either integer… Affected: 6.00.2800.1106 |
| CVE-2002-2164 | – | Dec 31 | Buffer overflow in Microsoft Outlook Express 5.0, 5.5, and 6.0 allows remote attackers to cause a denial of service (crash) via a long <A HREF> link Affected: 5.0; 5.0.1; 5.5; 6.0 |
| CVE-2002-2202 | – | Dec 31 | Outlook Express 6.0 does not delete messages from dbx files, even when a user empties the Deleted items folder, which allows local users to read other users email Affected: 6.0 |
| CVE-2002-1179 | – | Oct 28 | Buffer overflow in the S/MIME Parsing capability in Microsoft Outlook Express 5.5 and 6.0 allows remote attackers to execute arbitrary code via a digitally signed email with a… Affected: 5.5; 6.0 |
| CVE-2002-0862 | – | Oct 4 | The (1) CertGetCertificateChain, (2) CertVerifyCertificateChainPolicy, and (3) WinVerifyTrust APIs within the CryptoAPI for Microsoft products including Microsoft Windows 98… Affected: All versions, or not specified |
| CVE-2002-0285 | – | May 31 | Outlook Express 5.5 and 6.0 on Windows treats a carriage return ("CR") in a message header as if it were a valid carriage return/line feed combination (CR/LF), which could allow… Affected: 5.5; 6.0 |
| CVE-2002-0152 | – | Apr 22 | Buffer overflow in various Microsoft applications for Macintosh allows remote attackers to cause a denial of service (crash) or execute arbitrary code by invoking the file://… Affected: 5.0; 5.0.1; 5.0.2; 5.0.3 |
| CVE-2001-1547 | – | Dec 31 | Outlook Express 6.0, with "Do not allow attachments to be saved or opened that could potentially be a virus" enabled, does not block email attachments from forwarded messages,… Affected: 6.0 |
| CVE-2001-0945 | – | Dec 3 | Buffer overflow in Outlook Express 5.0 through 5.02 for Macintosh allows remote attackers to cause a denial of service via an e-mail message that contains a long line Affected: 5.0; 5.0.1; 5.0.2 |
| CVE-2001-0999 | – | Sep 12 | Outlook Express 6.00 allows remote attackers to execute arbitrary script by embedding SCRIPT tags in a message whose MIME content type is text/plain, contrary to the expected… Affected: 6.0 |
| CVE-2001-1088 | – | Jun 5 | Microsoft Outlook 8.5 and earlier, and Outlook Express 5 and earlier, with the "Automatically put people I reply to in my address book" option enabled, do not notify the user when… Affected: 4.0; 4.5; 4.27.3110; 4.72.2106; 4.72.3120.0; 4.72.3612; +2 more |
| CVE-2001-0322 | – | Jun 2 | MSHTML.DLL HTML parser in Internet Explorer 4.0, and other versions, allows remote attackers to cause a denial of service (application crash) via a script that creates and deletes… Affected: 5.5 |
| CVE-2001-0145 | – | May 3 | Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field Affected: 5.0 |
| CVE-2001-1325 | – | Apr 20 | Internet Explorer 5.0 and 5.5, and Outlook Express 5.0 and 5.5, allow remote attackers to execute scripts when Active Scripting is disabled by including the scripts in XML… Affected: 5.0; 5.5 |
| CVE-2000-0621 | – | Jul 20 | Microsoft Outlook 98 and 2000, and Outlook Express 4.0x and 5.0x, allow remote attackers to read files on the client's system via a malformed HTML message that stores files… Affected: 4.0; 4.01; 5.0; 5.0.1 |
| CVE-2000-0653 | – | Jul 20 | Microsoft Outlook Express allows remote attackers to monitor a user's email by creating a persistent browser link to the Outlook Express windows, aka the "Persistent Mail-Browser… Affected: 4.0; 4.01; 5.0; 5.0.1 |
| CVE-2000-0567 | – | Jul 18 | Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail… Affected: 4.0; 4.01; 5.0 |
| CVE-2000-0415 | – | May 12 | Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name Affected: 4.0; 4.01; 4.27.3110.1; 4.72.2106.4; 4.72.3120.0; 4.72.3612.1700 |
| CVE-2000-0105 | – | Feb 1 | Outlook Express 5.01 and Internet Explorer 5.01 allow remote attackers to view a user's email messages via a script that accesses a variable that references subsequent email… Affected: 5.0 |
| CVE-2000-0036 | – | Dec 22 | Outlook Express 5 for Macintosh downloads attachments to HTML mail without prompting the user, aka the "HTML Mail Attachment" vulnerability Affected: 5.0 |
| CVE-2000-0329 | – | Nov 11 | A Microsoft ActiveX control allows a remote attacker to execute a malicious cabinet file via an attachment and an embedded script in an HTML mail, aka the "Active Setup Control"… Affected: 4.27.3110.1; 4.72.2106.4; 4.72.3120.0; 4.72.3612.1700; 5.0 |
| CVE-1999-1016 | – | Aug 27 | Microsoft HTML control as used in (1) Internet Explorer 5.0, (2) FrontPage Express, (3) Outlook Express 5, and (4) Eudora, and possibly others, allows remote malicious web site or… Affected: 5.0 |
| CVE-1999-1164 | – | Jun 25 | Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang Affected: All versions, or not specified |
| CVE-1999-1033 | – | May 11 | Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode… Affected: through 4.72.3612.1700; 4.27.3110.1; 4.72.3120.0 |
| CVE-1999-0967 | – | Nov 1 | Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol Affected: All versions, or not specified |
Showing 45