CVE-2008-5424

Exploit

EPSS 28.81%
Veröffentlicht 11.12.2008 15:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

The MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512 does not properly handle (1) multipart/mixed e-mail messages with many MIME parts and possibly (2) e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service (infinite loop) via a large e-mail message, a related issue to CVE-2006-1173.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 8

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Outlook Express Version6.00.2900.5512

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	28.81%	0.961

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.3	8.6	2.9	AV:N/AC:M/Au:N/C:N/I:N/A:P

http://mime.recurity.com/cgi-bin/twiki/view/Main/AttackIntro

Exploit

http://securityreason.com/securityalert/4721

http://www.securityfocus.com/archive/1/499038/100/0/threaded

http://www.securityfocus.com/archive/1/499045/100/0/threaded

http://www.securityfocus.com/bid/32702

https://nvd.nist.gov/vuln/detail/CVE-2008-5424

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2008-5424

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2008-5424

EUVD