Netskope Threat Labs

FILE-OFFICE Microsoft Office Outlook Express NNTP response overflow attempt

IPS-CFW

1 SID: 9431

Detects a news server response exploiting CVE-2005-1213, a buffer overflow in Outlook Express's newsgroup handling that can allow code execution. The signature targets attacks against the legacy mail and news client.