Vulnerability in Microsoft Outlook Express

CVE-1999-1033

Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.

EPSS: 0.175 (96.8th percentile) — read the EPSS interpretation.

Affected products

Public proof-of-concept exploits

References

Frequently asked questions

What is CVE-1999-1033?
CVE-1999-1033 is a vulnerability in Microsoft Outlook Express. Published 1999-05-11.
Is CVE-1999-1033 known to be exploited?
2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.