Vulnerability in N/a
CVE-2007-3897
Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.
EPSS: 0.644 (98.5th percentile) — read the EPSS interpretation.
Affected products
- N/a — versions n/a
Public proof-of-concept exploits
References
- 1018785 (vdb-entry, x_refsource_SECTRACK)
- HPSBST02280 (x_refsource_HP, vendor-advisory)
- oval:org.mitre.oval:def:1706 (x_refsource_OVAL, signature, vdb-entry)
- MS07-056 (x_refsource_MS, vendor-advisory)
- 20071010 Re: iDefense Security Advisory 10.09.07: Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow (mailing-list, x_refsource_BUGTRAQ)
- 20071009 Microsoft Windows Mail and Outlook Express NNTP Protocol Heap Overflow (x_refsource_IDEFENSE, third-party-advisory)
- ADV-2007-3436 (vdb-entry, x_refsource_VUPEN)
- 1018786 (vdb-entry, x_refsource_SECTRACK)
- 25908 (vdb-entry, x_refsource_BID)
- TA07-282A (x_refsource_CERT, third-party-advisory)
Frequently asked questions
- What is CVE-2007-3897?
- CVE-2007-3897 is a vulnerability in N/a. Published 2007-10-09.
- Is CVE-2007-3897 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.