The Outlook Express Address Book control, when using Internet Explorer 6, allows remote malicious users to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
microsoft outlook_express_book_control |