Outlook Express version 5.50 and 6.0 contains a security vulnerability in the handling of S/MIME certificates which allows arbitrary code execution when inspecting a S/MIME signed message.
bc9a16df800c23057348b4928f436978cd5a07b073ace82b10988bb236ad0dc1