Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2005-1213

Published: 14/06/2005 Updated: 12/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Outlook Express

Vulnerability Summary

Stack-based buffer overflow in the news reader for Microsoft Outlook Express (MSOE.DLL) 5.5 SP2, 6, and 6 SP1 allows remote malicious NNTP servers to execute arbitrary code via a LIST response with a long second field.

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft outlook express 6.0

microsoft outlook express 5.5

Exploits

Exploit DB: Microsoft Outlook Express - NNTP Buffer Overflow (MS05-030)
#include <winsock2h> #include <windowsh> #include <stdioh> #include <stdlibh> #pragma comment(lib,"ws2_32") /* win32_bind - EXITFUNC=process LPORT=4444 Size=344 Encoder=PexFnstenvSub metasploitcom */ unsigned char scode[] = "\x31\xc9\x83\xe9\xb0\xd9\xee\xd9\x74\x24\xf4\x5b\x81\x73\x13\x96" "\x27\xc8\x3e\x83\xeb ...
Exploit DB: Microsoft Outlook Express - NNTP Response Parsing Buffer Overflow (MS05-030) (Metasploit)
## # $Id: ms05_030_nntprb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## class Metasploit3 < Msf:: ...

References

NVD-CWE-Otherhttp://www.idefense.com/application/poi/display?id=263&type=vulnerabilitieshttp://www.kb.cert.org/vuls/id/130614http://securitytracker.com/id?1014200http://www.securityfocus.com/bid/13951https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A989https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A167https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1088https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-030https://nvd.nist.govhttps://www.exploit-db.com/exploits/1066/https://www.kb.cert.org/vuls/id/130614
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook