Heap-based buffer overflow in Microsoft Outlook Express 6 and earlier and Windows Mail for Vista allows remote Network News Transfer Protocol (NNTP) servers to execute arbitrary code via long NNTP responses that trigger memory corruption.