CVE-2010-0816

Microsoft Outlook Express <6 SP1 - RCE

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2010-0816. PoCs published by Francis Provencher.

AI-analyzed exploit summary This exploit targets a remote integer overflow vulnerability in Microsoft Outlook Express and Windows Mail by sending a specially crafted response to a client initiating a connection to a server under the attacker's control. The PoC simulates a malicious POP3 server that triggers the vulnerability during the mail protocol handshake.

Description

Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability."

Exploits (1)

exploitdb WORKING POC VERIFIED
by Francis Provencher · textdoswindows
https://www.exploit-db.com/exploits/12564

This exploit targets a remote integer overflow vulnerability in Microsoft Outlook Express and Windows Mail by sending a specially crafted response to a client initiating a connection to a server under the attacker's control. The PoC simulates a malicious POP3 server that triggers the vulnerability during the mail protocol handshake.

Classification
Working Poc 90%
Attack Type
Rce
Complexity
Trivial
Reliability
Reliable
Target: Microsoft Outlook Express, Microsoft Windows Mail (Vista SP1, Windows Server 2008 SP1)
No auth needed
Prerequisites: Victim must connect to a malicious POP3 server controlled by the attacker
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-131A.html
Third Party Advisory, VDB Entry vdb-entry signature x_refsource_oval
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6734
Exploit mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2010-05/0068.html
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/40052

Scores

EPSS 0.2032
EPSS Percentile 97.1%

Details

CWE
CWE-189
Status published
Products (4)
microsoft/outlook_express 5.5 sp2
microsoft/outlook_express 6.0 sp1 (2 CPE variants)
microsoft/windows_live_mail
microsoft/windows_mail
Published May 12, 2010
Tracked Since Feb 18, 2026