CVE Number | Vulnerability | Product | Severity | Date |
---|---|---|---|---|
MS07-034 | Cumulative Security Update for Outlook Express and Windows Mail (929123) | Windows XP | Critical | 13-06-2007 |
Technical Information
Brief overview of the risk:
This critical security update resolves two privately reported and two publicly disclosed vulnerabilities. One of these vulnerabilities could allow remote code execution if a user viewed a specially crafted e-mail using Windows Mail in Windows Vista. The other vulnerabilities could allow information disclosure if a user visits a specially crafted Web page using Internet Explorer and cannot be exploited directly in Outlook Express.
Detailed Information on the risk:
The remote host is running a version of Microsoft Outlook Express
Affected Software
Windows XP Service Pack 2Windows XP Professional x64 Edition
Windows XP Professional x64 Edition Service Pack 2
Windows Server 2003 Service Pack 1
Windows Server 2003 Service Pack 2
Windows Server 2003 with SP1 for Itanium-based Systems
Windows Server 2003 with SP2 for Itanium-based Systems
Windows Server 2003 x64 Edition
Windows Server 2003 x64 Edition Service Pack 2
Windows Vista
Windows Vista x64 Edition