(PVS) Signatures - Tenable Network Security

PVS ID: 4232 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:26962
Description: Arbitrary code can be executed on the remote host through the email client. The remote
host is running a version of Microsoft Outlook Express that contains several security flaws
that may allow an attacker to execute arbitrary code on the remote host. To exploit this
flaw, an attacker would need to send a malformed email to a victim on the remote host and
have him open it.
Solution: Microsoft has released a set of patches for Outlook Express and Windows Mail.
CVE-2007-3897
Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)
PVS ID: 4233 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:26962
Description: Arbitrary code can be executed on the remote host through the email client. The remote
host is running a version of Microsoft Outlook Express that contains several security flaws
that may allow an attacker to execute arbitrary code on the remote host. To exploit this
flaw, an attacker would need to send a malformed email to a victim on the remote host and
have him open it.
Solution: Microsoft has released a set of patches for Outlook Express and Windows Mail.
CVE-2007-3897
Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)
PVS ID: 4234 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:26962
Description: Arbitrary code can be executed on the remote host through the email client. The remote
host is running a version of Microsoft Outlook Express that contains several security flaws
that may allow an attacker to execute arbitrary code on the remote host. To exploit this
flaw, an attacker would need to send a malformed email to a victim on the remote host and
have him open it.
Solution: Microsoft has released a set of patches for Outlook Express and Windows Mail.
CVE-2007-3897
Passive Vulnerability Scanner (PVS) Signatures
Cumulative Security Update for Microsoft Outlook Express and Windows Mail (941202)
PVS ID: 4235 FAMILY: SMTP Clients RISK: HIGH NESSUS ID:26962
Description: Arbitrary code can be executed on the remote host through the email client. The remote
host is running a version of Microsoft Outlook Express that contains several security flaws
that may allow an attacker to execute arbitrary code on the remote host. To exploit this
flaw, an attacker would need to send a malformed email to a victim on the remote host and
have him open it.
Family Internet Services 1101