Windows Outlook Express畸形邮件头拒绝服务漏洞(MS04-018)

发布日期：2004-07-13
更新日期：2004-07-15

受影响系统：

Microsoft Outlook Express 6.0 SP1 (64 bit Edition)
Microsoft Outlook Express 6.0 SP1
Microsoft Outlook Express 5.5 SP2
Microsoft Outlook Express 6.0
- Microsoft Windows XP Professional SP1
- Microsoft Windows XP Professional
- Microsoft Windows XP Home SP1
- Microsoft Windows XP Home
- Microsoft Windows 2003 Web Edition
- Microsoft Windows 2003 Standard Edition
- Microsoft Windows 2003 Enterprise Edition
- Microsoft Windows 2003 Datacenter Edition
- Microsoft Windows 2000 Server SP4
- Microsoft Windows 2000 Server SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server
- Microsoft Windows 2000 Professional SP4
- Microsoft Windows 2000 Professional SP3
- Microsoft Windows 2000 Professional SP2
- Microsoft Windows 2000 Professional SP1
- Microsoft Windows 2000 Professional
- Microsoft Windows 2000 Datacenter Server SP4
- Microsoft Windows 2000 Datacenter Server SP3
- Microsoft Windows 2000 Datacenter Server SP2
- Microsoft Windows 2000 Datacenter Server SP1
- Microsoft Windows 2000 Datacenter Server
- Microsoft Windows 2000 Advanced Server SP4
- Microsoft Windows 2000 Advanced Server SP3
- Microsoft Windows 2000 Advanced Server SP2
- Microsoft Windows 2000 Advanced Server SP1
- Microsoft Windows 2000 Advanced Server

描述：

---

BUGTRAQ ID: 10711
CVE(CAN) ID: CVE-2004-0215

Microsoft Outlook Express是流行的邮件处理程序。

Microsoft Outlook Express在处理畸形邮件头时存在问题，远程攻击者可以利用这个漏洞对Outlook Express进行拒绝服务攻击。

目前没有详细漏洞细节提供。

<*来源：Microsoft Security Team （secure@microsoft.com）

链接：http://www.microsoft.com/technet/security/bulletin/MS04-018.mspx
*>

建议：

---

厂商补丁：

Microsoft
---------
Microsoft已经为此发布了一个安全公告（MS04-018）以及相应补丁:
MS04-018：Cumulative Security Update for Outlook Express (823353)
链接：http://www.microsoft.com/technet/security/bulletin/MS04-018.mspx

补丁下载：

Microsoft Outlook Express 5.5 Service Pack 2

http://www.microsoft.com/downloads/details.aspx?FamilyId=9A8D1BF2-93C5-41A9-B79A-31D54743BA0E&displaylang=en

Microsoft Outlook Express 6

http://www.microsoft.com/downloads/details.aspx?FamilyId=D5900DF1-10AB-4850-9064-3070CE1F948A&displaylang=en

Microsoft Outlook Express 6 Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=AD6A96BC-DAF0-4EAB-89B8-BD702B3E3E5D&displaylang=en

Microsoft Outlook Express 6 Service Pack 1 (64 bit Edition)

http://www.microsoft.com/downloads/details.aspx?FamilyId=ADCCF304-6CFC-48D6-9A3F-2A601C3A04A5&displaylang=en

Microsoft Outlook Express 6 on Windows Server 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=C99AAFCD-B99B-4B13-A366-5F8EDC83633F&displaylang=en

Microsoft Outlook Express 6 on Windows Server 2003 (64 bit edition)

http://www.microsoft.com/downloads/details.aspx?FamilyId=10D1AAD0-0313-4BEB-A174-84CF573F31FD&displaylang=en

文章整理：西部数码--专业提供域名注册、虚拟主机服务
http://www.west263.com
以上信息与文章正文是不可分割的一部分,如果您要转载本文章,请保留以上信息，谢谢!