Legacy Update: Get back online, activate, and install updates on your legacy Windows PC

This update resolves the "Malformed vCard" security vulnerability in Outlook and Outlook Express.

This update resolves the "Malformed vCard" security vulnerability in Outlook and Outlook Express. This vulnerability exists because the component in Outlook and Outlook Express that processes the vCard (virtual business card) has an unchecked buffer (a temporary data storage area without a string length limit). A malicious user can exploit this vulnerability by creating a vCard that contains specially malformed data, and sending it to another user. When the recipient opens the vCard, the data overruns the buffer. This causes the e-mail program to stop functioning until it is restarted. In a more serious case, a malicious user could exploit the unchecked buffer to run unauthorized on the other user's computer. Download now to ensure that your e-mail service processes vCards correctly.

Files

Status: Deleted This download is no longer available on microsoft.com. The downloads below are archives provided by the Internet Archive Wayback Machine from the Microsoft Download Center prior to July 2012.

Supported operating systems: Windows 2000, Windows 95, Windows 98, Windows ME, Windows NT

This update applies to:

• Internet Explorer 5.01 Service Pack 1
• Internet Explorer 5.5 Service Pack 1.

Note: Because this vulnerability exists in a component of Outlook Express, which ships as a part of Internet Explorer, the update version you download is dependent upon whether you have Internet Explorer 5.5 Service Pack 1 or Internet Explorer 5.01 Service Pack 1.

1. Click the Download link to start the download, or choose a different language from the drop-down list and click Go.
2. Do one of the following:

• To start the installation immediately, click Open or Run this program from its current location
.
• To copy the download to your computer for installation at a later time, click Save or Save this program to disk.