Signature Detail
Short Name |
SMTP:OVERFLOW:OUTLOOK-CERT-OF |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
SMTP |
Keywords |
Microsoft Outlook Express Certificate Overflow |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
SMTP: Microsoft Outlook Express Certificate Overflow
This signature detects attempts to exploit a known vulnerability against Microsoft Outlook Express, which ships with Internet Explorer 5.5. Attackers can send a maliciously crafted email to a host; if the host opens the email in Outlook Express, attackers can execute arbitrary code on the host.
Extended Description
Microsoft Outlook Express contains an unchecked buffer in the code that generates warning messages when certain error conditions associated with digital signatures are encountered. Execution of arbitrary code in the security context of the current user is possible. Microsoft has verified that this vulnerability exists in Outlook Express 5.5 and 6.0. Earlier versions may be affected, however, they are no longer supported by Microsoft.
Affected Products
- Microsoft Outlook Express 5.5
- Microsoft Outlook Express 6.0
References