Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Bugtraq ID:	21501
Class:	Boundary Condition Error
CVE:	CVE-2006-2386
Remote:	Yes
Local:	No
Published:	Dec 12 2006 12:00AM
Updated:	Dec 22 2006 12:02AM
Credit:	The vendor reported this issue.
Vulnerable:	Microsoft Windows XP Tablet PC Edition SP2 Microsoft Windows XP Tablet PC Edition SP1 Microsoft Windows XP Tablet PC Edition Microsoft Windows XP Professional x64 Edition Microsoft Windows XP Professional SP2 Microsoft Windows XP Professional SP1 Microsoft Windows XP Professional Microsoft Windows XP Media Center Edition SP2 Microsoft Windows XP Media Center Edition SP1 Microsoft Windows XP Media Center Edition Microsoft Windows XP Home SP2 Microsoft Windows XP Home SP1 Microsoft Windows XP Home Microsoft Windows XP Embedded SP1 Microsoft Windows XP Embedded Microsoft Windows XP 64-bit Edition Version 2003 SP1 Microsoft Windows XP 64-bit Edition Version 2003 Microsoft Windows XP 64-bit Edition SP1 Microsoft Windows XP 64-bit Edition Microsoft Windows XP 0 Microsoft Windows Server 2003 Web Edition SP1 Beta 1 Microsoft Windows Server 2003 Web Edition SP1 Microsoft Windows Server 2003 Web Edition Microsoft Windows Server 2003 Standard x64 Edition Microsoft Windows Server 2003 Standard Edition SP1 Beta 1 Microsoft Windows Server 2003 Standard Edition SP1 Microsoft Windows Server 2003 Standard Edition Microsoft Windows Server 2003 Enterprise x64 Edition Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition Itanium SP1 Microsoft Windows Server 2003 Enterprise Edition Itanium 0 Microsoft Windows Server 2003 Enterprise Edition SP1 Beta 1 Microsoft Windows Server 2003 Enterprise Edition SP1 Microsoft Windows Server 2003 Enterprise Edition Microsoft Windows Server 2003 Datacenter x64 Edition Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Microsoft Windows Server 2003 Datacenter Edition Itanium 0 Microsoft Windows Server 2003 Datacenter Edition SP1 Beta 1 Microsoft Windows Server 2003 Datacenter Edition SP1 Microsoft Windows Server 2003 Datacenter Edition Microsoft Windows 2000 Server SP4 Microsoft Windows 2000 Server SP3 Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server + Avaya DefinityOne Media Servers + Avaya IP600 Media Servers + Avaya S3400 Message Application Server 0 + Avaya S8100 Media Servers 0 Microsoft Windows 2000 Professional SP4 Microsoft Windows 2000 Professional SP3 Microsoft Windows 2000 Professional SP2 Microsoft Windows 2000 Professional SP1 Microsoft Windows 2000 Professional Microsoft Windows 2000 Datacenter Server SP4 Microsoft Windows 2000 Datacenter Server SP3 Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Advanced Server SP4 Microsoft Windows 2000 Advanced Server SP3 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Outlook Express 6.0 SP2 Microsoft Outlook Express 6.0 SP1 + Microsoft Windows XP 64-bit Edition SP1 + Microsoft Windows XP 64-bit Edition SP1 + Microsoft Windows XP Home SP1 + Microsoft Windows XP Home SP1 + Microsoft Windows XP Professional SP1 + Microsoft Windows XP Professional SP1 Microsoft Outlook Express 6.0 + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Datacenter Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Enterprise Edition Itanium 0 + Microsoft Windows Server 2003 Itanium SP2 + Microsoft Windows Server 2003 Itanium SP2 + Microsoft Windows Server 2003 Itanium SP1 + Microsoft Windows Server 2003 Itanium SP1 + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard Edition + Microsoft Windows Server 2003 Standard x64 Edition + Microsoft Windows Server 2003 Standard x64 Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 Web Edition + Microsoft Windows Server 2003 x64 SP2 + Microsoft Windows Server 2003 x64 SP2 + Microsoft Windows XP 64-bit Edition + Microsoft Windows XP 64-bit Edition + Microsoft Windows XP Home + Microsoft Windows XP Home + Microsoft Windows XP Home + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition SP2 + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Media Center Edition + Microsoft Windows XP Professional + Microsoft Windows XP Professional + Microsoft Windows XP Professional + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Professional x64 Edition SP2 + Microsoft Windows XP Tablet PC Edition SP2 + Microsoft Windows XP Tablet PC Edition SP2 + Microsoft Windows XP Tablet PC Edition + Microsoft Windows XP Tablet PC Edition Microsoft Outlook Express 5.5 SP2 + Microsoft Windows 2000 Advanced Server SP4 + Microsoft Windows 2000 Advanced Server SP4 + Microsoft Windows 2000 Advanced Server SP3 + Microsoft Windows 2000 Advanced Server SP3 + Microsoft Windows 2000 Datacenter Server SP4 + Microsoft Windows 2000 Datacenter Server SP4 + Microsoft Windows 2000 Datacenter Server SP3 + Microsoft Windows 2000 Datacenter Server SP3 + Microsoft Windows 2000 Professional SP4 + Microsoft Windows 2000 Professional SP4 + Microsoft Windows 2000 Professional SP3 + Microsoft Windows 2000 Professional SP3 + Microsoft Windows 2000 Server SP4 + Microsoft Windows 2000 Server SP4 + Microsoft Windows 2000 Server SP3 + Microsoft Windows 2000 Server SP3 + Microsoft Windows ME + Microsoft Windows ME Microsoft Outlook Express 5.5 SP1 Microsoft Outlook Express 5.5 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows NT 4.0 + Microsoft Internet Explorer 5.0.1 for Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 98 + Microsoft Internet Explorer 5.0.1 for Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 95 + Microsoft Internet Explorer 5.0.1 for Windows 2000 + Microsoft Internet Explorer 5.0.1 for Windows 2000 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.0.1 + Microsoft Internet Explorer 5.5 + Microsoft Internet Explorer 5.5 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows 98SE - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 HP Storage Management Appliance 2.1 + HP Storage Management Appliance III + HP Storage Management Appliance II + HP Storage Management Appliance I Avaya S8100 Media Servers R9 Avaya S8100 Media Servers R8 Avaya S8100 Media Servers R7 Avaya S8100 Media Servers R6 Avaya S8100 Media Servers R12 Avaya S8100 Media Servers R11 Avaya S8100 Media Servers R10 Avaya S8100 Media Servers 0 + Microsoft Windows 2000 Server + Microsoft Windows NT Server 4.0 SP6a Avaya Messaging Application Server 0
Not Vulnerable:

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Microsoft Outlook Express is prone to a remote code-execution vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer.

A remote attacker can exploit this issue to execute arbitrary code with the privileges of the unsuspecting victim. A successful exploit may aid in the remote compromise of the underlying computer.

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]:[email protected].

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

Solution:
Microsoft has released an advisory to address this issue. Please see the references for more information.


Microsoft Windows Server 2003 Datacenter Edition SP1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows XP Media Center Edition SP2

• Microsoft Cumulative Security Update for Outlook Express for Windows XP (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=560E8778-9733 -4719-A565-614FD490C320

Microsoft Outlook Express 6.0

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF


• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  http://www.microsoft.com/downloads/details.aspx?familyid=7D3FEA7A-DDC0 -4A22-A8B3-D5F46707D017


• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DDE5C141-DE6C -4DD9-8399-6E5DB0DCC574


• Microsoft Cumulative Security Update for Outlook Express for Windows XP (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=560E8778-9733 -4719-A565-614FD490C320


• Microsoft Cumulative Security Update for Outlook Express for Windows XP x64 Edition (KB923694)
  http://www.microsoft.com/downloads/details.aspx?familyid=6BE4F4CE-ABD6 -4A38-84A5-8952E3531217

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1 Beta 1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  http://www.microsoft.com/downloads/details.aspx?familyid=7D3FEA7A-DDC0 -4A22-A8B3-D5F46707D017

Microsoft Windows Server 2003 Enterprise Edition Itanium SP1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  http://www.microsoft.com/downloads/details.aspx?familyid=7D3FEA7A-DDC0 -4A22-A8B3-D5F46707D017

Microsoft Windows XP Tablet PC Edition SP2

• Microsoft Cumulative Security Update for Outlook Express for Windows XP (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=560E8778-9733 -4719-A565-614FD490C320

Microsoft Windows Server 2003 Enterprise Edition Itanium 0

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  http://www.microsoft.com/downloads/details.aspx?familyid=7D3FEA7A-DDC0 -4A22-A8B3-D5F46707D017

Microsoft Windows Server 2003 Standard Edition SP1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows Server 2003 Standard Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows Server 2003 Enterprise x64 Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DDE5C141-DE6C -4DD9-8399-6E5DB0DCC574

Microsoft Outlook Express 6.0 SP1

• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1F0432D4-3F45 -472E-8C2D-B7B6A879ACB8

Microsoft Windows Server 2003 Datacenter Edition Itanium 0

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  http://www.microsoft.com/downloads/details.aspx?familyid=7D3FEA7A-DDC0 -4A22-A8B3-D5F46707D017

Microsoft Windows Server 2003 Datacenter x64 Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DDE5C141-DE6C -4DD9-8399-6E5DB0DCC574

Microsoft Windows Server 2003 Enterprise Edition SP1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Outlook Express 5.5 SP2

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CB0563FB-A05D -4D9D-B269-B5602B09C16A

Microsoft Windows Server 2003 Datacenter Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows 2000 Advanced Server SP4

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CB0563FB-A05D -4D9D-B269-B5602B09C16A


• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1F0432D4-3F45 -472E-8C2D-B7B6A879ACB8

Microsoft Windows Server 2003 Enterprise Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows XP Home SP2

• Microsoft Cumulative Security Update for Outlook Express for Windows XP (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=560E8778-9733 -4719-A565-614FD490C320

Microsoft Windows 2000 Datacenter Server SP4

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CB0563FB-A05D -4D9D-B269-B5602B09C16A


• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1F0432D4-3F45 -472E-8C2D-B7B6A879ACB8

Microsoft Windows Server 2003 Web Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows Server 2003 Web Edition SP1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=FE358108-15DF -4ED9-B257-01AEB82647DF

Microsoft Windows XP 64-bit Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows XP x64 Edition (KB923694)
  http://www.microsoft.com/downloads/details.aspx?familyid=6BE4F4CE-ABD6 -4A38-84A5-8952E3531217

Microsoft Windows XP Professional SP2

• Microsoft Cumulative Security Update for Outlook Express for Windows XP (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=560E8778-9733 -4719-A565-614FD490C320

Microsoft Windows Server 2003 Datacenter Edition Itanium SP1

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 for Itanium-based Systems (KB
  http://www.microsoft.com/downloads/details.aspx?familyid=7D3FEA7A-DDC0 -4A22-A8B3-D5F46707D017

Microsoft Windows Server 2003 Standard x64 Edition

• Microsoft Cumulative Security Update for Outlook Express for Windows Server 2003 x64 Edition (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DDE5C141-DE6C -4DD9-8399-6E5DB0DCC574

Microsoft Windows 2000 Server SP4

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CB0563FB-A05D -4D9D-B269-B5602B09C16A


• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1F0432D4-3F45 -472E-8C2D-B7B6A879ACB8

Microsoft Windows 2000 Professional SP4

• Microsoft Cumulative Security Update for Outlook Express 5.5 Service Pack 2 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=CB0563FB-A05D -4D9D-B269-B5602B09C16A


• Microsoft Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB923694)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=1F0432D4-3F45 -472E-8C2D-B7B6A879ACB8

Microsoft Outlook Express Windows Address Book Contact Record Remote Code Execution Vulnerability

References:

• ASA-2006-272 - MS06-076 Cumulative Security Update for Outlook Express (Avaya)
  
• Microsoft Outlook Homepage (Microsoft )
  
• Microsoft Security Bulletin MS06-076 - Cumulative Security Update for Outlook Ex (Microsoft)