CVE-2006-0014

Published: Apr 12, 2006Modified: Apr 16, 2026

5.1

Vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability: 4.9 / Impact: 6.4

Source: NVD

Description

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.

Affected (5)

Products: Microsoft: Outlook Express

1 product

Outlook Express

Configuration A

5 vulnerable

Vulnerable Software	Affected Versions
Microsoft Outlook Express	Version 5.5
Microsoft Outlook Express	Version 5.5 sp1
Microsoft Outlook Express	Version 5.5 sp2
Microsoft Outlook Express	Version 6.0
Microsoft Outlook Express	Version 6.0 sp1

References (34)

http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html

Source: secure@microsoft.com

http://secunia.com/advisories/19617

Source: secure@microsoft.com

PatchVendor Advisory

http://securityreason.com/securityalert/691

Source: secure@microsoft.com

http://securitytracker.com/id?1015898

Source: secure@microsoft.com

http://www.securityfocus.com/archive/1/430645/100/0/threaded

Source: secure@microsoft.com

http://www.securityfocus.com/bid/17459

Source: secure@microsoft.com

http://www.vupen.com/english/advisories/2006/1321

Source: secure@microsoft.com

http://www.zerodayinitiative.com/advisories/ZDI-06-007.html

Source: secure@microsoft.com

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-016

Source: secure@microsoft.com

https://exchange.xforce.ibmcloud.com/vulnerabilities/25535

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1611

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1682

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1769

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1771

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1780

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1791

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A812

Source: secure@microsoft.com

http://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/19617

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://securityreason.com/securityalert/691

Source: af854a3a-2127-422b-91ae-364da2661108

http://securitytracker.com/id?1015898

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/430645/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/17459

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.vupen.com/english/advisories/2006/1321

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.zerodayinitiative.com/advisories/ZDI-06-007.html

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-016

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25535

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1611

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1682

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1769

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1771

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1780

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1791

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A812

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.