CVE-2000-0415

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:N/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html
http://www.securityfocus.com/bid/1195Patch, Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2000-05/0140.html
http://www.securityfocus.com/bid/1195Patch, Vendor Advisory

Timeline

Published: May 12, 2000
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2000

CVE-2000-04165.0NTMail 5.x allows network users to bypass the NTMail proxy restrictions by redirecting their requests to NTMail's web configuration server.CVE-2000-04175.0The HTTP administration interface to the Cayman 3220-H DSL router allows remote attackers to cause a denial of service via a long username o CVE-2000-04185.0The Cayman 3220-H DSL router allows remote attackers to cause a denial of service via oversized ICMP echo (ping) requests.CVE-2000-04197.5The Office 2000 UA ActiveX Control is marked as "safe for scripting," which allows remote attackers to conduct unauthorized activities via t CVE-2000-04207.2The default configuration of SYSKEY in Windows 2000 stores the startup key in the registry, which could allow an attacker tor ecover it and CVE-2000-04217.5The process_bug.cgi script in Bugzilla allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-04227.5Buffer overflow in Netwin DMailWeb CGI program allows remote attackers to execute arbitrary commands via a long utoken parameter.CVE-2000-04235.0Buffer overflow in Netwin DNEWSWEB CGI program allows remote attackers to execute arbitrary commands via long parameters such as group, cmd,CVE-2000-04247.5The CGI counter 4.0.7 by George Burgyan allows remote attackers to execute arbitrary commands via shell metacharacters.CVE-2000-042510.0Buffer overflow in the Web Archives component of L-Soft LISTSERV 1.8 allows remote attackers to execute arbitrary commands.CVE-2000-04265.0UltraBoard 1.6 and other versions allow remote attackers to cause a denial of service by referencing UltraBoard in the Session parameter, wh CVE-2000-04274.6The Aladdin Knowledge Systems eToken device allows attackers with physical access to the device to obtain sensitive information without know