GCVE - cpe:2.3:a:microsoft:outlook_express:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:outlook_express:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Outlook Express (`f046aefd-390c-5dcc-9429-f8a7c882bc5f`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-4040`	vulnerable	2026-06-08 04:49:55.587239	Details available Argument injection vulnerability involving Microsoft Outlook and Outlook Express, when certain URIs are registered, allows remote attackers to conduct cross-browser scripting attacks and execute arbitrary commands via shell metacharacters in an unspecified URI, which are inserted into the command line when invoking the handling process, a similar issue to CVE-2007-3670. Published: 2007-07-27T22:00:00.000Z Updated: 2025-04-03T14:27:23.595Z Open on db.gcve.eu Reference links http://larholm.com/2007/07/25/mozilla-protocol-abuse/ http://seclists.org/fulldisclosure/2007/Jul/0557.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2007-3897`	vulnerable	2026-06-08 04:49:55.305490	Details available Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption. Published: 2007-10-09T22:00:00.000Z Updated: 2024-08-07T14:37:05.670Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1018785 http://www.securityfocus.com/archive/1/482366/100/0/threaded http://www.securityfocus.com/archive/1/482366/100/0/threaded https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1706 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-056	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1164`	vulnerable	2026-06-08 04:44:58.225347	Details available Microsoft Outlook client allows remote attackers to cause a denial of service by sending multiple email messages with the same X-UIDL headers, which causes Outlook to hang. Published: 2001-09-12T04:00:00.000Z Updated: 2024-08-01T17:02:53.767Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=93041631215856&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-1033`	vulnerable	2026-06-08 04:44:58.191398	Details available Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang. Published: 2001-09-12T04:00:00.000Z Updated: 2024-08-01T16:55:29.428Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/252 http://marc.info/?l=bugtraq&m=92647407427342&w=2 http://marc.info/?l=bugtraq&m=92663402004275&w=2	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-1999-0967`	vulnerable	2026-06-08 04:44:58.173453	Details available Buffer overflow in the HTML library used by Internet Explorer, Outlook Express, and Windows Explorer via the res: local resource protocol. Published: 2000-01-04T05:00:00.000Z Updated: 2024-08-01T16:55:29.399Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/CVE-1999-0967	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.