Microsoft Outlook 98 / Outlook Express 4.x长文件名漏洞

漏洞信息详情

Microsoft Outlook 98 / Outlook Express 4.x长文件名漏洞

• CNNVD编号：CNNVD-200005-048
• 危害等级： 中危
  
  
• CVE编号：
  CVE-2000-0415
  
• 漏洞类型：
  
  
  缓冲区溢出
  
• 发布时间：
  
  2000-05-12
  
• 威胁类型：
  
  
  远程
  
• 更新时间：
  
  2005-10-20
  
• 厂        商：
  
  microsoft
• 漏洞来源：
  Posted to Bugtraq …

Outlook Express 4.x 存在缓冲区溢出漏洞，攻击者可以通过邮件货包含a .jpg or .bmp 的超长文件名留言触发拒绝服务。

Microsoft has released patches to fix Outlook 98 and Outlook Express 4.x.
Microsoft Outlook 98

• Microsoft outptch2Fixes versions of Microsoft Outlook 98 susceptible to the Long Filename Vulnerability.
  
  http://officeupdate.microsoft.com/downloadDetails/outptch2.htm

Microsoft Outlook Express 4.27.3110

• Microsoft Outlook Express 4.x Long Filename FixFixes for Outlook Express 4.x in various operating environments are available here.
  
  http://www.microsoft.com/windows/ie/security/oelong.asp

Microsoft Outlook Express 4.72.2106

• Microsoft Outlook Express 4.x Long Filename FixFixes for Outlook Express 4.x in various operating environments are available here.
  
  http://www.microsoft.com/windows/ie/security/oelong.asp

Microsoft Outlook Express 4.72.3120

• Microsoft Outlook Express 4.x Long Filename FixFixes for Outlook Express 4.x in various operating environments are available here.
  
  http://www.microsoft.com/windows/ie/security/oelong.asp

Microsoft Outlook Express 4.72.3612

• Microsoft Outlook Express 4.x Long Filename FixFixes for Outlook Express 4.x in various operating environments are available here.
  
  http://www.microsoft.com/windows/ie/security/oelong.asp

来源: BID
名称: 1195
链接:http://www.securityfocus.com/bid/1195

来源: BUGTRAQ
名称: 20000512 Overflow in Outlook Express 4.* – too long filenames with graphic format extension
链接:http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html