Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*

part: a version: 6.0 update: *

VendorMicrosoft (67206627-3ef6-5870-9d98-26a9f2e7065c)
ProductOutlook Express (f046aefd-390c-5dcc-9429-f8a7c882bc5f)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2010-0816 vulnerable 2026-06-08 04:52:04.595082 Details available
Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability."
Published: 2010-05-12T01:00:00.000Z
Updated: 2024-08-07T00:59:39.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-1448 vulnerable 2026-06-08 04:50:20.568256 Details available
The MHTML protocol handler in a component of Microsoft Outlook Express 5.5 SP2 and 6 through SP1, and Windows Mail, does not assign the correct Internet Explorer Security Zone to UNC share pathnames, which allows remote attackers to bypass intended access restrictions and read arbitrary files via an mhtml: URI in conjunction with a redirection, aka "URL Parsing Cross-Domain Information Disclosure Vulnerability."
Published: 2008-08-13T00:00:00.000Z
Updated: 2024-08-07T08:24:41.805Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2227 vulnerable 2026-06-08 04:49:44.374795 Details available
The MHTML protocol handler in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle Content-Disposition "notifications," which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "Content Disposition Parsing Cross Domain Information Disclosure Vulnerability."
Published: 2007-06-12T21:00:00.000Z
Updated: 2024-08-07T13:23:51.188Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2007-2225 vulnerable 2026-06-08 04:49:44.372478 Details available
A component in Microsoft Outlook Express 6 and Windows Mail in Windows Vista does not properly handle certain HTTP headers when processing MHTML protocol URLs, which allows remote attackers to obtain sensitive information from other Internet Explorer domains, aka "URL Parsing Cross Domain Information Disclosure Vulnerability."
Published: 2007-06-12T20:00:00.000Z
Updated: 2024-08-07T13:23:51.107Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2386 vulnerable 2026-06-08 04:49:06.465516 Details available
Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file.
Published: 2006-12-13T01:00:00.000Z
Updated: 2024-08-07T17:51:03.671Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-2111 vulnerable 2026-06-08 04:48:58.913580 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0014 vulnerable 2026-06-08 04:48:45.678886 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2226 vulnerable 2026-06-08 04:48:28.670683 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1213 vulnerable 2026-06-08 04:48:25.964497 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2694 vulnerable 2026-06-08 04:48:10.607521 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-2137 vulnerable 2026-06-08 04:48:08.688751 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0526 vulnerable 2026-06-08 04:47:50.114557 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0380 vulnerable 2026-06-08 04:47:49.630158 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-0215 vulnerable 2026-06-08 04:47:49.015039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2003-1378 vulnerable 2026-06-08 04:47:47.446790 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2202 vulnerable 2026-06-08 04:47:19.376574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2164 vulnerable 2026-06-08 04:47:19.250469 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-1179 vulnerable 2026-06-08 04:46:23.124140 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0285 vulnerable 2026-06-08 04:46:21.129678 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-1547 vulnerable 2026-06-08 04:46:20.255105 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2001-0999 vulnerable 2026-06-08 04:45:21.243412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.