CVE-2007-3897: Microsoft Outlook Express

High severity, CVSS 9.3. EPSS: 54.6% chance of exploitation in the next 30 days.

Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier, and Windows Mail for Vista, allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.

Affected products

• Microsoft Outlook Express: up to and including 6.0; version 6.0 only
• Microsoft Windows Mail: affected versions not specified

Published 2007-10-09. Last modified 2026-06-16.