CVE-2006-0014: Microsoft Outlook Express

Medium severity, CVSS 5.1. EPSS: 24.1% chance of exploitation in the next 30 days.

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.

Affected products

• Microsoft Outlook Express: version 5.5 only; version 6.0 only

Published 2006-04-12. Last modified 2026-06-16.