Microsoft Outlook Express S/MIME Buffer Overflow Vulnerability

Microsoft Outlook Express S/MIME Buffer Overflow Vulnerability

Microsoft Outlook Express contains an unchecked buffer in the code that generates warning messages when certain error conditions associated with digital signatures are encountered.

Execution of arbitrary code in the security context of the current user is possible.

Microsoft has verified that this vulnerability exists in Outlook Express 5.5 and 6.0. Earlier versions may be affected, however, they are no longer supported by Microsoft.