CVE-2006-0014
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute...
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
- Record
CVE-2006-0014- CVSS 2.0
- 5.1 Medium
AV:N/AC:H/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
- Record
CVE-2006-0014- Updated
- 2026-11-02
EUVDEUVD-2006-0022 No score
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
- Record
EUVD-2006-0022- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-whwq-93f8-2jg6 No score
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute...
Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.
- Record
GHSA-whwq-93f8-2jg6- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-0014 is a medium vulnerability (CVSS 5.1) in Microsoft Outlook Express, published April 12, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 24.1%, the 97th percentile. No source names a fixed version.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1611
securitytracker.com/id?1015898
securityreason.com/securityalert/691
zerodayinitiative.com/advisories/ZDI-06-007.html
Show 13 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/25535
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-016
securityfocus.com/archive/1/430645/100/0/threaded
secunia.com/advisories/19617
lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html
vupen.com/english/advisories/2006/1321
nvd.nist.gov/vuln/detail/CVE-2006-0014
github.com/advisories/GHSA-whwq-93f8-2jg6