CVE-2010-0816

N/A

Published: May 12, 2010 at 01:00 AM UTC

Updated: June 16, 2026 at 11:16 PM UTC

10 products affected across 1 vendorOutlook ExpressWindows MailWindows Live Mail

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 20%

Description

Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Outlook Express · Microsoft

95%

5.5 sp2 6.0 6.0 sp1

microsoft-windows-2000 (environment) · microsoft-windows-2003-server (environment) · microsoft-windows-server-2003 (environment) · microsoft-windows-xp (environment)

Windows Live Mail · Microsoft

95%

All versions

microsoft-windows-7 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows Mail · Microsoft

95%

All versions

microsoft-windows-7 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment)

Windows 2000 · Microsoftdevice

80%

All versions

Windows 2003 Server · Microsoftdevice

80%

All versions

Windows 7 · Microsoftdevice

80%