Release DateMay 14, 2010 |
Severitycritical |
ImpactSystem compromise |
DescriptionThis indicates a possible attack against an integer-overflow vulnerability in Windows Live Mail and Outlook Express which if well exploited could lead to arbitrary remote code execution. |
Affected ProductsMicrosoft Outlook Express 5.5 Service Pack 2Microsoft Outlook Express 6 Service Pack 1 Windows Mail and Windows Live Mail on all Microsoft Windows Platforms |
Recommended ActionsPlease refer to the Microsoft advisory for updates or patches:http://www.microsoft.com/technet/security/bulletin/ms10-030.mspx |
Coverage IPS
VCM |
Common Vulnerabilities and Exposures (CVE)CVE-2010-0816 |
Reference/shttp://technet.microsoft.com/en-us/security/bulletin/ms10-030.mspx (MS-ID) |