Unspecified vulnerability in Microsoft Outlook Express 6 and earlier allows remote attackers to execute arbitrary code via a crafted contact record in a Windows Address Book (WAB) file. If a end user is logged on with administrative user rights, an attacker who successfully exploited this vulnerability could take complete control of an affected system.
Publication date: Wed, 13 Dec 2006 07:28:00 +0000