• info
• discussion
• exploit
• solution
• references

Microsoft Outlook Express NNTP Response Parsing Buffer Overflow Vulnerability

Solution:
Microsoft has released fixes for supported versions of the software.


Microsoft Outlook Express 5.5 SP1

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB897715)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6932151-2ae2 -4c6e-861a-6ff5bde61191&displaylang=en

Microsoft Outlook Express 5.5

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB897715)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6932151-2ae2 -4c6e-861a-6ff5bde61191&displaylang=en

Microsoft Outlook Express 5.5 SP2

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB897715)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6932151-2ae2 -4c6e-861a-6ff5bde61191&displaylang=en

Microsoft Outlook Express 6.0 SP1

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB897715)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6932151-2ae2 -4c6e-861a-6ff5bde61191&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB897715)
  For Outlook Express 6.0 SP1 running on Windows XP SP1, Windows 2000 SP3, and Windows 2000 SP4.
  http://www.microsoft.com/downloads/details.aspx?familyid=89e4d8ee-4d8e -4660-a53d-28502b3d2518&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB897715)
  For Outlook Express 6.0 SP1 running on Windows Server 2003.
  http://www.microsoft.com/downloads/details.aspx?FamilyId=d439eee9-05eb -4ecb-9e86-6259f1acaabb&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 64-bit Itanium Edition (KB897
  For Outlook Express 6.0 running on Windows Server 2003 64-bit Itanium Edition, Windows Server 2003, Datacenter Edition for 64-Bit Itanium-based Systems, and Windows Server 2003, Enterprise Edition for 64-Bit Itanium-based Systems.
  


• Microsoft Cumulative Security Update for Outlook Express for Windows XP 64-bit Itanium Edition (KB897715)
  For Outlook Express 6.0 SP1 running on Windows XP Professional 64-bit Edition SP1.
  


• Microsoft Cumulative Security Update for Outlook Express for Windows XP 64-bit Itanium Edition, Version 2003 (
  For Outlook Express 6.0 SP1 running on Windows XP for Itanium-based Systems Version 2003.
  

Microsoft Outlook Express 6.0

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB897715)
  http://www.microsoft.com/downloads/details.aspx?familyid=a6932151-2ae2 -4c6e-861a-6ff5bde61191&displaylang=en