General 8065 Published by

Patch Available for "Malformed E-mail Header" Vulnerability

Originally posted: July 18, 2000

Summary
=======
Microsoft has released a patch that eliminates a security
vulnerability in Microsoft(r) Outlook(r) and Outlook Express. Under
certain conditions, the vulnerability could allow a malicious user to
cause code of his choice to execute on another user´s computer.

Frequently asked questions regarding this vulnerability and the
patch can be found at
http://www.microsoft.com/technet/security/bulletin/fq00-043.asp

Patch Availability
==================
The vulnerability can be eliminated by a default installation of
either of the following upgrades:
- Internet Explorer 5.01 Service Pack 1,
http://www.microsoft.com/Windows/ie/download/ie501sp1.htm
- Internet Explorer 5.5 on any system except Windows 2000,
http://www.microsoft.com/windows/ie/download/ie55.htm