Code used to authenticate messages to Outlook Express users might be turned against them by attackers to run hostile code on victims' machines.

Microsoft's latest security advisory warns that a buffer overflow flaw in the Outlook Express S/MIME parsing functions "could enable system compromise". Redmond has issued a patch.

read more