CVE-2001-0145

Summary

Buffer overflow in VCard handler in Outlook 2000 and 98, and Outlook Express 5.x, allows an attacker to execute arbitrary commands via a malformed vCard birthday field.

Impact & exploitability

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products we track (1)

Recommendation

Apply the vendor fix promptly. Open any affected product above for its exact safe version.

Official patch: http://www.atstake.com/research/advisories/2001/a022301-1.txt ↗

Additional information

• NVD record
• http://www.atstake.com/research/advisories/2001/a022301-1.txtPatch
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2001/ms01-012