Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Outlook_express | Microsoft | 5.5-sp2 (including) | 5.5-sp2 (including) |
| Outlook_express | Microsoft | 6.0 (including) | 6.0 (including) |
| Outlook_express | Microsoft | 6.0-sp1 (including) | 6.0-sp1 (including) |