Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).
CVE-2000-0567 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Microsoft Outlook
7 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
18.3%
top 4.78%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
Timeline
PublishedJul 18
Latest updateApr 30
Description
Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email header, aka the "Malformed E-mail Header" vulnerability.
CVSS vector
AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9
Affected Packages2 packages
🔴Vulnerability Details
2GHSA▶
GHSA-4w6m-4639-4jgr: Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email heade↗2022-04-30
CVEList▶
CVE-2000-0567: Buffer overflow in Microsoft Outlook and Outlook Express allows remote attackers to execute arbitrary commands via a long Date field in an email heade↗2000-10-13
💥Exploits & PoCs
4Exploit-DB
▶
Exploit-DB
▶