CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-3897

Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.64

EPSS Ranking 98.3%

CVSS Severity

CVSS v2 Score 9.3

References

Products affected by CVE-2007-3897

Microsoft » Outlook Express » Version: N/A

cpe:2.3:a:microsoft:outlook_express:-
Microsoft » Outlook Express » Version: 4.0

cpe:2.3:a:microsoft:outlook_express:4.0
Microsoft » Outlook Express » Version: 4.01

cpe:2.3:a:microsoft:outlook_express:4.01
Microsoft » Outlook Express » Version: 4.5

cpe:2.3:a:microsoft:outlook_express:4.5
Microsoft » Outlook Express » Version: 4.72.2106.4

cpe:2.3:a:microsoft:outlook_express:4.72.2106.4
Microsoft » Outlook Express » Version: 4.72.3120.0

cpe:2.3:a:microsoft:outlook_express:4.72.3120.0
Microsoft » Outlook Express » Version: 4.72.3612.1700

cpe:2.3:a:microsoft:outlook_express:4.72.3612.1700
Microsoft » Outlook Express » Version: 5.0

cpe:2.3:a:microsoft:outlook_express:5.0
Microsoft » Outlook Express » Version: 5.0.1

cpe:2.3:a:microsoft:outlook_express:5.0.1
Microsoft » Outlook Express » Version: 5.0.2

cpe:2.3:a:microsoft:outlook_express:5.0.2
Microsoft » Outlook Express » Version: 5.0.3

cpe:2.3:a:microsoft:outlook_express:5.0.3
Microsoft » Outlook Express » Version: 5.01

cpe:2.3:a:microsoft:outlook_express:5.01
Microsoft » Outlook Express » Version: 5.02

cpe:2.3:a:microsoft:outlook_express:5.02
Microsoft » Outlook Express » Version: 5.5

cpe:2.3:a:microsoft:outlook_express:5.5
Microsoft » Outlook Express » Version: 6.0

cpe:2.3:a:microsoft:outlook_express:6.0
Microsoft » Windows Mail » Version: N/A

cpe:2.3:a:microsoft:windows_mail:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2007-3897

Products

Pricing

Contact Us