Microsoft Outlook Express Integer Overflow in Processing POP3/IMAP Responses Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1023972 |
|
SecurityTracker URL: http://securitytracker.com/id/1023972
|
|
CVE Reference:
CVE-2010-0816
(Links to External Site)
|
Date: May 11 2010
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 5.5 SP2, 6 SP1; and prior service packs
|
Description:
A vulnerability was reported in Microsoft Outlook Express. A remote user can execute arbitrary code on the target system.
A remote mail server can return specially crafted POP3 or IMAP responses to the connected mail client to trigger an integer overflow and execute arbitrary code on the target system. The code will run with the privileges of the target mail client user.
Francis Provencher of Protek Research Lab reported this vulnerability.
|
Impact:
A remote mail server can execute arbitrary code on the connected target client system.
|
Solution:
The vendor has issued the following fixes:
Microsoft Windows 2000 Service Pack 4, Microsoft Outlook Express 5.5 Service Pack 2:
http://www.microsoft.com/downloads/details.aspx?familyid=661F5DE3-A593-4961-8E8D-2777797EB5C5
Windows XP Service Pack 2 and Windows XP Service Pack 3, Microsoft Outlook Express 6:
http://www.microsoft.com/downloads/details.aspx?familyid=99707C3D-A3CB-47DA-B38E-8AE0227FD703
Windows XP Professional x64 Edition Service Pack 2, Microsoft Outlook Express 6:
http://www.microsoft.com/downloads/details.aspx?familyid=44BC97BB-6F76-4C96-AF72-69DAAEA80FFF
Windows Server 2003 Service Pack 2, Microsoft Outlook Express 6:
http://www.microsoft.com/downloads/details.aspx?familyid=EB9742FC-0934-4B38-9EC4-3597FC71EC00
Windows Server 2003 x64 Edition Service Pack 2, Microsoft Outlook Express 6:
http://www.microsoft.com/downloads/details.aspx?familyid=5678515A-97EA-4E00-8700-D3F2FCDC0EFC
Windows Server 2003 with SP2 for Itanium-based Systems, Microsoft Outlook Express 6:
http://www.microsoft.com/downloads/details.aspx?familyid=60EF635B-CB6D-402F-B904-E69B519D797F
A restart is required.
The Microsoft advisory is available at:
http://www.microsoft.com/technet/security/bulletin/ms10-030.mspx
|
Vendor URL: www.microsoft.com/technet/security/bulletin/ms10-030.mspx (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
Windows (2000), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Tue, 11 May 2010 17:45:56 +0000
Subject: http://www.microsoft.com/technet/security/bulletin/ms10-030.mspx
|
Microsoft Security Bulletin MS10-030 - Critical: Vulnerability in Outlook Express and Windows Mail Could Allow Remote Code Execution (978542)
CVE-2010-0816
|
|
