Rule--Sid3-12636--Summary:This event is generated when an attempt is made to exploit a known vulnerability in Outlook Express.--Impact:Denial of Service. Information disclosure. Loss of integrity. --Detailed Information:Unspecified vulnerability in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista allows remote attackers to execute arbitrary code via malformed Network News Transfer Protocol (NNTP) responses that trigger memory corruption.--Affected Systems:Microsoft Outlook Express 6Windows Mail for Vista--Attack Scenarios:An attacker would need to host a malicious NNTP server that a user could connect to. The vulnerability can be exploited in a malicious server response.--Ease of Attack:Simple.--False Positives:None known.--False Negatives:None known.--Corrective Action:Upgrade to the latest non-affected version of the software.Apply the appropriate vendor supplied patches.--Contributors:Sourcefire Vulnerability Research TeamThis document was generated from data supplied by the National Vulnerability Database. A product of the National Institute of Standards and Technology.For more information see http://nvd.nist.gov/--Additional References:--