CVE-2005-4840

State: Published
Severity: Not scored
Published: Jun 7, 2007
Updated: Aug 8, 2024
Reserved: Jun 7, 2007

Description

The Outlook Express Address Book control, when using Internet Explorer 6, allows remote attackers to cause a denial of service (NULL dereference and browser crash) by creating the OutlookExpress.AddressBook COM object, which is not intended for use within Internet Explorer.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

20070606 IE 6 / MS Office Outlook Express Address Book Activex DoSmailing-list
26836vdb-entry
outlook-addressbook-activex-dos(34755)vdb-entry
20050301 IObjectSafety and Internet Explorermailing-list
http://browserfun.blogspot.com/2006/07/mobb-3-outlookexpressaddressbook_02.html

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.