microsoft windows mail vulnerabilities and exploits

(subscribe to this query)

9.3

CVSSv2

Heap-based buffer overflow in Microsoft Outlook Express 6 and previous versions, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.

Microsoft Outlook Express 6.0 Microsoft Outlook Express Microsoft Windows Mail -

7.1

CVSSv2

The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote malicious users to bypass intended access restrictions and r...

Microsoft Outlook Express 5.5 Microsoft Windows Mail Microsoft Outlook Express 6.0

9.3

CVSSv2

Windows Mail in Microsoft Windows Vista might allow user-assisted remote malicious users to execute certain programs via a link to a (1) local file or (2) UNC share pathname in which there is a directory with the same base name as an executable program at the same level, as demon...

Microsoft Windows Vista

1 EDB exploit

4.3

CVSSv2

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows prior to 12.1.6 MP5; Symantec Endpoint Prot...

Broadcom Symantec Data Center Security Server -Symantec Advanced Threat Protection -Symantec Csapi Symantec Email Security.cloud -Symantec Endpoint Protection Symantec Endpoint Protection Cloud -Symantec Endpoint Protection For Small Business -Symantec Endpoint Protection For Small Business Symantec Mail Security For Domino Symantec Mail Security For Domino 8.1.2 Symantec Mail Security For Domino 8.1.3 Symantec Mail Security For Microsoft Exchange Symantec Mail Security For Microsoft Exchange 7.0 Symantec Mail Security For Microsoft Exchange 7.0.1 Symantec Mail Security For Microsoft Exchange 7.0.2 Symantec Mail Security For Microsoft Exchange 7.0.3 Symantec Mail Security For Microsoft Exchange 7.0.4 Symantec Mail Security For Microsoft Exchange 7.5 Symantec Mail Security For Microsoft Exchange 7.5.1 Symantec Mail Security For Microsoft Exchange 7.5.2 Symantec Mail Security For Microsoft Exchange 7.5.3 Symantec Mail Security For Microsoft Exchange 7.5.4

1 EDB exploit

4.3

CVSSv2

The RAR file parser component in the AntiVirus Decomposer engine in Symantec Advanced Threat Protection: Network (ATP); Symantec Email Security.Cloud; Symantec Data Center Security: Server; Symantec Endpoint Protection (SEP) for Windows prior to 12.1.6 MP5; Symantec Endpoint Prot...

Broadcom Symantec Data Center Security Server -Symantec Advanced Threat Protection -Symantec Csapi Symantec Email Security.cloud -Symantec Endpoint Protection Symantec Endpoint Protection Cloud -Symantec Endpoint Protection For Small Business -Symantec Endpoint Protection For Small Business Symantec Mail Security For Domino Symantec Mail Security For Domino 8.1.2 Symantec Mail Security For Domino 8.1.3 Symantec Mail Security For Microsoft Exchange Symantec Mail Security For Microsoft Exchange 7.0 Symantec Mail Security For Microsoft Exchange 7.0.1 Symantec Mail Security For Microsoft Exchange 7.0.2 Symantec Mail Security For Microsoft Exchange 7.0.3 Symantec Mail Security For Microsoft Exchange 7.0.4 Symantec Mail Security For Microsoft Exchange 7.5 Symantec Mail Security For Microsoft Exchange 7.5.1 Symantec Mail Security For Microsoft Exchange 7.5.2 Symantec Mail Security For Microsoft Exchange 7.5.3 Symantec Mail Security For Microsoft Exchange 7.5.4

1 EDB exploit

10

CVSSv2

Microsoft Virtual Machine (VM) up to and including build 5.0.3805 allows remote malicious users to execute arbitrary code by including a Java applet that invokes COM (Component Object Model) objects in a web site or an HTML mail.

Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services Microsoft Windows Me Microsoft Windows Nt 4.0 Microsoft Windows 98 Microsoft Windows 98se Microsoft Windows 95 Microsoft Windows Xp

7.5

CVSSv2

Integer overflow in JsArrayFunctionHeapSort function used by Windows Script Engine for JScript (JScript.dll) on various Windows operating system allows remote malicious users to execute arbitrary code via a malicious web page or HTML e-mail that uses a large array index value tha...

Microsoft Windows Me Microsoft Windows Nt 4.0 Microsoft Windows 2000 Microsoft Windows 2000 Terminal Services Microsoft Windows Xp Microsoft Windows 98 Microsoft Windows 98se

9.3

CVSSv2

Untrusted search path vulnerability in Windows Mail and Windows Meeting Space in Microsoft Windows Vista SP2, Windows Server 2008 SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demo...

Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2008 -Microsoft Windows 7 -Microsoft Windows Vista

7.5

CVSSv2

The HTML Help facility in Microsoft Windows 98, 98 Second Edition, Millennium Edition, NT 4.0, NT 4.0 Terminal Server Edition, Windows 2000, and Windows XP uses the Local Computer Security Zone when opening .chm files from the Temporary Internet Files folder, which allows remote ...

Microsoft Windows 2000 Microsoft Windows 98 Microsoft Windows 98se Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows Me Microsoft Windows 2000 Terminal Services

10

CVSSv2

HyperTerminal application for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the length of a value that is saved in a session file, which allows remote malicious users to execute arbitrary code via a malicious HyperTerminal session fi...

Microsoft Windows 2000 Microsoft Windows 2003 Server Enterprise Microsoft Windows 2003 Server Standard Microsoft Windows 2003 Server Web Microsoft Windows Nt 4.0 Microsoft Windows Xp Microsoft Windows 2003 Server Datacenter 64-bit Microsoft Windows 2003 Server R2 Microsoft Windows 2003 Server Enterprise 64-bit

Get Started

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook