ZDNet UK


Skip to Main Content

ZDNet.co.uk - Winner of Best Business Website 2007
  1. Home
  2. News
  3. Blogs
  4. Reviews
  5. Jobs
  6. Resources
  7. Community
  8. My ZDNet

 

ZDNet UK RSS Feeds


Join the ZDNet Community

Resources Downloads

Download Now

Outlook Malformed E-mail Header Vulnerability Patch


License Free
Requirements None
Downloads 314 Limitations None
Publisher Microsoft File Size 963k
Date added 25 Jul 2000 Check your speed

A component shared by Outlook and Outlook Express, Inetcomm.dll, contains an unchecked buffer in the functionality that parses e-mail headers when downloading mail via either POP3 or IMAP4. By sending an e-mail that overruns the buffer, a malicious user could cause either of two effects to occur when the mail is downloaded from the server by an affected e-mail client: if the affected field is filled with random data, the e-mail could be made to crash; if the affected field is filled with carefully crafted data, the e-mail client could be made to run code of the malicious user's choice. The vulnerability affects all Outlook Express users and all Outlook users whose mail clients are configured to use either POP3 or IMAP4. Outlook users who have configured Outlook to use only MAPI services are unlikely to be affected by the vulnerability. Despite this, Microsoft recommends that such customers apply one of the corrective steps discussed in the Patch Availability section, primarily because the patch protects against other vulnerabilities that affect all Outlook users, regardless of the mail protocol they use.

A version of Inetcomm.dll that is not affected by the vulnerability ships as part of Outlook Express 5.5, and customers who have installed it do not need to take any additional action. Outlook Express 5.5 is available as part of Internet Explorer 5.01 Service Pack 1, and, except when installed on Windows 2000, Internet Explorer 5.5. Customers who do not wish to upgrade to Outlook Express 5.5 should install the patch.

Download Now

Did you find this download useful?
26 out of 50 users found this download useful


People who downloaded this software also downloaded...

Drag-Drop Form 7.2.9

Encrypt, store, and get quick access to your login URLs, usernames, passwords, and other private information.

More info +


DeVault Pro 2009 R6

Organize, backup, encrypt, and share all your files via secure digital vaults.

More info +


Smart Keystroke Recorder Pro 4.9

Monitor your computer and Internet activities.

More info +


All Monitor 2.5

Monitor and log your children's or employee's activities on computer.

More info +


OrgPassword 2.7

Store, secure, and organize your personal information.

More info +


Flash Windows Hider 2.20

Hide and unhide private windows, folders, and applications.

More info +


O&O SafeErase 3.0.1064

Erase sensitive files and protect your data.

More info +


WatcherForYou Pro 2.2.2007.2019

Set a security system and view the area from multiple cameras.

More info +


n-Pass2Go 2.7.0.465

Store and manage your passwords and encrypted data on any removable device.

More info +


ICQ AIM Hider 2.9

Instantly hide selected programs and their tray icons using mouse or keyboard shortcut.

More info +



Download

Brocade File Insight 2.0

Brocade File Insight is a free Windows-based reporting utility that provides a quick and easy way to understand your SMB/CIFS network file environments.

  • Downloads: 2,300
  • Requirements: Microsoft 32-bit Windows Server 2003, XP Professional, or newer
  • License: Free Tool / Utility
  • Publisher: Brocade
  • Size: 0

Download Now

Google Chrome Special Report

All roads lead to Chrome

All roads lead to Chrome

Comment With its new browser, Google has finally taken its gaudy, chrome-plated, futuristic ray gun and pointed it straight at Microsoft's head

More Special Reports

Sentry Posts Blog

Nasa hacker loses last-ditch appeal

Self-confessed Nasa hacker Gary McKinnon has lost his appeal to Home Secretary Jacqui Smith against extradition to the US. In an email sent to ZDNet.co.uk on Monday, McKinnon's... More

1 comment

Up to 1.7m MoD personal details missin...

The potential number of people affected by the the loss of a hard disk containing MoD details could be a high as 1.7 million, defence minister Bob Ainsworth told parliament on Monday. In... More

1 comment

Toshiba touts Quantum Key Distribution

Toshiba research scientists have developed a method of distributing quantum keys more efficiently, the company has claimed in a statement: "[Quantum Key Distribution -- ] QKD --... More

Post a comment

Featured Talkback

In association with Intel
It seems to me this is a burden being placed on the wrong shoulders. There is not an It system in the world that can stop an individual taking information in their heads and spewing out at the nearest undesirable third party.

By: RonaldWilkins

Read full story:
Deloitte: People are still weakest security link

DOWNLOAD

Security Essentials

Security Downloads

There are masses of security suites out there for small businesses. Here's a selection to get you started

Editor’s Rating
1 Norton 360™
2 AVG Anti-Virus Free Edition Rating: 10
3 PC Tools AntiVirus Free Edition
4 Kaspersky Internet Security

See All Software

In association with Symantec