Microsoft Patches Outlook Express for Mac

Microsoft has released a patch that will correct a mail attachment vulnerability found in Outlook Express for Macintosh. By design, when an HTML mail is received, the mail content is downloaded onto the user’s machine and processed. However, attachments to the mail should not be downloaded unless the user requests it. A flaw in Outlook Express 5 for Macintosh causes it to download all content, including attachments. Although, the vulnerability does not provide a way for a malicious user to launch the downloaded attachments. This patch will also update several digital certificates set to expire on December 31st. Visit Microsoft's Security Advisor Web site at http://www.microsoft.com/security for more information and to download the patch.