CVE-2006-2386

Description

Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file.

Risk Information

Base Score

9.1

MODERATE

Vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS Score

Exploitation Probability

55.112

Associated Vulnerability

Vulnerability	OS Platform
Cumulative Security Update for Outlook Express 6 Service Pack 1 (KB923694)	Windows
Cumulative Security Update for Outlook Express for Windows XP (KB923694)	Windows
Cumulative Security Update for Outlook Express for Windows Server 2003 (KB923694)	Windows

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234