COMMAND

    Outlook Express 5 Spellchecker

SYSTEMS AFFECTED

    Outlook Express 5

PROBLEM

    Aaron Lafferty found  following.  It  us in the  same vein as  the
    Qualcom Eudora 3.x problem  (by Cancer Omega) with  PGP signatures
    available at:

        http://oliver.efri.hr/~crv/security/bugs/NT/eudora7.html

    Outlook Express 5 from  Microsoft, when the check  spelling before
    sending is applied, will try  to spell check an already  digitally
    signed message, and also try  to spell check the signature.   Thus
    corrupting the signature  of the document.   This again, is  not a
    fault with pgp.

    This was observed on an intel box running NT 4 server with Outlook
    Express 5, other  platform's, os's, and  versions of this  product
    have not been tested.

SOLUTION

    Nothing yet.