Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Outlook Express NNTP响应解析溢出漏洞
Vulnerability Description
Microsoft Outlook Express是Microsoft Windows操作系统捆绑的邮件和新闻组客户端。 Microsoft Outlook Express的新闻阅读功能中存在远程缓冲区溢出漏洞，可能允许攻击者以当前用户的权限执行任意代码。 具体的说，在发布LIST命令后解析NNTP服务器响应时会触发这个漏洞。位于C:\Program Files\Outlook Express\MSOE.DLL的MSOE.dll中的一个例程中存在栈溢出。以下地址和偏移基于Microsoft Windows
CVSS Information
N/A
Vulnerability Type
N/A