MS KB900930: Microsoft Outlook Express Multiple Vulnerabilities

medium Nessus Plugin ID 18680

Synopsis

A denial of service attack can be launched against the remote Outlook Express install.

Description

The remote host runs a version of Outlook Express that contains multiple vulnerabilities.

An attacker may exploit these vulnerabilities to disable the Outlook Express client of a victim.

To exploit these issues, an attacker would need to send a malformed email message to a victim and wait for him to read it using outlook.

Solution

Microsoft has released a set of patches for Windows XP.

Plugin Details

Severity: Medium

ID: 18680

File Name: smb_kb900930.nasl

Version: 1.20

Type: local

Agent: windows

Family: Windows

Published: 7/12/2005

Updated: 11/15/2018

Supported Sensors: Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Temporal Score: 3.2

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:outlook_express

Required KB Items: SMB/OutlookExpress/MSOE.dll/Version

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 7/12/2005

Reference Information

CVE: CVE-2005-2226

BID: 14225

MSKB: 900930

Detections

Analytics