• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Outlook Express Windows Address Book File Parsing Buffer Overflow Vulnerability

Solution:
Microsoft has released fixes to address this vulnerability in supported versions of the affected software.


Microsoft Outlook Express 5.5 SP2

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB911567)
  For Microsoft Windows 2000 Service Pack 4.
  http://www.microsoft.com/downloads/details.aspx?familyid=E61A3D64-14FD -4976-BB03-C31CA6EE61E2&displaylang=en

Microsoft Outlook Express 6.0 SP1

• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB911567) - English
  For Microsoft Windows XP Service Pack 1 and Microsoft Windows 2000 Service Pack 4.
  http://www.microsoft.com/downloads/details.aspx?familyid=CDA93501-99CB -4F28-BB73-6438CAD081DB&displaylang=en

Microsoft Outlook Express 6.0

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB911567)
  For Microsoft Windows Server 2003 and Microsoft Windows Server 2003 Service Pack 1.
  http://www.microsoft.com/downloads/details.aspx?familyid=484DE679-5505 -4196-BDD8-F7CF325AF0F5&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  For Microsoft Windows Server 2003 on Itanium-based Systems and Microsoft Windows Server 2003 with SP1 for Itanium-based Systems.
  http://www.microsoft.com/downloads/details.aspx?familyid=800BF687-BEE5 -478F-A025-43CD16682F31&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB911567)
  For Microsoft Windows Server 2003 x64 Edition.
  http://www.microsoft.com/downloads/details.aspx?familyid=A7B10D8F-D9D7 -4423-AA6D-C1C41D23794E&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express for Windows XP (KB911567)
  For Microsoft Windows XP Service Pack 2.
  http://www.microsoft.com/downloads/details.aspx?familyid=0DD827BC-6FA1 -405A-933E-FB422A4E8096&displaylang=en


• Microsoft Cumulative Security Update for Outlook Express for Windows XP x64 Edition (KB911567)
  For Microsoft Windows XP Professional x64 Edition.
  http://www.microsoft.com/downloads/details.aspx?familyid=FF772C0B-6F98 -449D-B02E-C9C236068172&displaylang=en