VULNERABILITY INTELLIGENCE
CVE-2006-0014
CVSS score5.1 MEDIUM
EPSS probability24.10%
CISA KEVNot currently listed
Published2006-04-12
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.