MS KB900930: Microsoft Outlook Express Multiple Vulnerabilities

Medium Nessus Plugin ID 18680


A denial of service attack can be launched against the remote Outlook Express install.


The remote host runs a version of Outlook Express that contains multiple vulnerabilities.

An attacker may exploit these vulnerabilities to disable the Outlook Express client of a victim.

To exploit these issues, an attacker would need to send a malformed email message to a victim and wait for him to read it using outlook.


Microsoft has released a set of patches for Windows XP.

See Also

Plugin Details

Severity: Medium

ID: 18680

File Name: smb_kb900930.nasl

Version: $Revision: 1.17 $

Type: local

Agent: windows

Family: Windows

Published: 2005/07/12

Modified: 2017/08/30

Dependencies: 18489

Risk Information

Risk Factor: Medium


Base Score: 4.3

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/o:microsoft:windows, cpe:/a:microsoft:outlook_express

Required KB Items: SMB/OutlookExpress/MSOE.dll/Version

Exploit Available: true

Exploit Ease: No exploit is required

Vulnerability Publication Date: 2005/07/12

Reference Information

CVE: CVE-2005-2226

BID: 14225

OSVDB: 18241

MSKB: 900930