← Database

CVE-2007-3897

CRITICAL CVSS: 9.3 Published: 2007-10-09 Modified: 2026-06-16

Description

Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.

Affected Platforms

Microsoft Windows MailMicrosoft Outlook Express

Weakness Type

CWE-119

References