Outlook Express and Windows Mail NNTP Memory Corruption Vulnerability

MS07-056 : Outlook Express and Windows Mail NNTP Memory Corruption
Vulnerability

Windows ships with either the Outlook Express (OE) or the Windows Mail
(WM) email client to allow you to download and read your email.
According to Microsoft, both these email clients suffer from a memory
corruption vulnerability involving the way they handle the Network News
Transfer Protocol (NNTP) . By enticing one of your users to a specially
designed web page containing NNTP content, an attacker could exploit
this vulnerability to execute code on that user's computer with that
user's privileges. Since typical Windows users have local administrative
privileges, attackers can usually exploit this flaw to gain complete
control of Windows machines.
Microsoft rating: Critical.

http://www.microsoft.com/technet/sec.../ms07-056.mspx

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

Your point is?

This was patched today!

--

Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"Leythos" <> wrote in message
news:. ..
> MS07-056 : Outlook Express and Windows Mail NNTP Memory Corruption
> Vulnerability
>
> Windows ships with either the Outlook Express (OE) or the Windows Mail
> (WM) email client to allow you to download and read your email.
> According to Microsoft, both these email clients suffer from a memory
> corruption vulnerability involving the way they handle the Network News
> Transfer Protocol (NNTP) . By enticing one of your users to a specially
> designed web page containing NNTP content, an attacker could exploit
> this vulnerability to execute code on that user's computer with that
> user's privileges. Since typical Windows users have local administrative
> privileges, attackers can usually exploit this flaw to gain complete
> control of Windows machines.
> Microsoft rating: Critical.
>
> http://www.microsoft.com/technet/sec.../ms07-056.mspx
>
> --
>
> Leythos
> - Igitur qui desiderat pacem, praeparet bellum.
> - Calling an illegal alien an "undocumented worker" is like calling a
> drug dealer an "unlicensed pharmacist"
> (remove 999 for proper email address)

In article <>,
says...
> Your point is?
>
> This was patched today!

Having just read this group for the first time today, I thought people
might be interested in it, since it fits with the group. I didn't see it
mentioned specifically in between Adam's rants.

--

Leythos
- Igitur qui desiderat pacem, praeparet bellum.
- Calling an illegal alien an "undocumented worker" is like calling a
drug dealer an "unlicensed pharmacist"
(remove 999 for proper email address)

Leythos wrote:
> In article <>,
> says...
>> Your point is?
>>
>> This was patched today!
>
> Having just read this group for the first time today, I thought people
> might be interested in it, since it fits with the group. I didn't see it
> mentioned specifically in between Adam's rants.
>

LOL, you admit your obsession with following adam's posts.

--
Priceless quotes in m.p.w.vista.general group:
http://protectfreedom.tripod.com/kick.html

"Fair use is not merely a nice concept--it is a federal law based on
free speech rights under the First Amendment and is a cornerstone of the
creativity and innovation that is a hallmark of this country. Consumer
rights in the digital age are not frivolous."
- Maura Corbett