When was CVE-2006-0014 disclosed?

CVE-2006-0014 was first published in the National Vulnerability Database on April 12, 2006, with the most recent update on April 16, 2026. EchelonGraph re-ingests CVE updates from NVD on a 2-hour cycle, so this page reflects the latest published state.

Is CVE-2006-0014 actively exploited?

CVE-2006-0014 is not currently on CISA's Known Exploited Vulnerabilities catalog. FIRST EPSS estimates a 96.9% percentile likelihood of exploitation in the next 30 days — higher percentiles indicate greater predicted risk.

How do I remediate CVE-2006-0014?

Patch to the fixed version published by the affected vendor. Where vendor advisories exist for CVE-2006-0014, EchelonGraph cross-links them in the Vendor Advisories panel below — those typically contain the canonical remediation steps, fixed version numbers, and any vendor-specific mitigations.

CVE-2006-0014

NONECVSS 0.0Elevated

0.0

Buffer overflow in Microsoft Outlook Express 5.5 and 6 allows remote attackers to execute arbitrary code via a crafted Windows Address Book (WAB) file containing "certain Unicode strings" and modified length values.

CVSS v3: —
EG Score: —
EPSS: 96.9%
KEV: Not listed

References (34)

secure@microsofthttp://lists.grok.org.uk/pipermail/full-disclosure/2006-April/045003.html
secure@microsofthttp://secunia.com/advisories/19617
secure@microsofthttp://securityreason.com/securityalert/691
secure@microsofthttp://securitytracker.com/id?1015898
secure@microsofthttp://www.securityfocus.com/archive/1/430645/100/0/threaded
secure@microsofthttp://www.securityfocus.com/bid/17459
secure@microsofthttp://www.vupen.com/english/advisories/2006/1321
secure@microsofthttp://www.zerodayinitiative.com/advisories/ZDI-06-007.html
secure@microsofthttps://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-016
secure@microsofthttps://exchange.xforce.ibmcloud.com/vulnerabilities/25535
secure@microsofthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1611
secure@microsofthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1682
secure@microsofthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1769
secure@microsofthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1771
secure@microsofthttps://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1780

Is Your Infrastructure Affected by CVE-2006-0014?

EchelonGraph automatically scans your cloud infrastructure and maps CVE exposure using blast radius analysis.

Start Free Scan →Browse All CVEs

CVE-2006-0014

Published

Last Modified

References (34)

Data Freshness Timeline

Frequently asked(4)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2006-0014?

CVE-2006-0014

📅 Published

🔄 Last Modified

🔗 References (34)

Data Freshness Timeline

❓ Frequently asked(4)

Dependency Blast Radius

Is Your Infrastructure Affected by CVE-2006-0014?

Published

Last Modified

References (34)

Frequently asked(4)