CVE Catalog
CVE-1999-1033
MediumExploitation Probability (EPSS)
Very high risk17.50%
97th percentile - higher than 97% of all known CVEs
Summary
Microsoft Outlook Express before version 4.72.3612.1700 allows a malicious user to send a message containing '..', which can inadvertently cause Outlook to re-enter POP3 command mode and hang the POP3 session.
Risk Assessment
Hanging the POP3 session may lead to disruptions in email communication, affecting service availability for users.
Recommendation
It is recommended to update Microsoft Outlook Express to the latest version to mitigate this vulnerability.
Original NVD description (English source)
Microsoft Outlook Express before 4.72.3612.1700 allows a malicious user to send a message that contains a .., which can inadvertently cause Outlook to re-enter POP3 command mode and cause the POP3 session to hang.