CVE-2000-0415: Microsoft Outlook

Medium severity, CVSS 5.0. EPSS: 6% chance of exploitation in the next 30 days.

Buffer overflow in Outlook Express 4.x allows attackers to cause a denial of service via a mail or news message that has a .jpg or .bmp attachment with a long file name.

Affected products

• Microsoft Outlook: version 98 only
• Microsoft Outlook Express: version 4.0 only; version 4.01 only; version 4.27.3110.1 only; version 4.72.2106.4 only; version 4.72.3120.0 only; version 4.72.3612.1700 only

Published 2000-05-12. Last modified 2026-06-16.