CVE-2006-0002
Last modified
CVE-2006-0002 is a vulnerability of currently unknown severity. Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.. EPSS estimates a 45.58% chance of exploitation in the next 30 days.
Description
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
Metrics
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Exchange Server | 5.0 | — |
| Microsoft | Exchange Server | 5.5 | — |
| Microsoft | Exchange Server | 2000 | Sp3 |
| Microsoft | Office | 2000 | Sp3 |
| Microsoft | Office | 2003 | Sp1 |
| Microsoft | Office | xp | Sp3 |
| Microsoft | Outlook | 2000 | Sp3 |
| Microsoft | Outlook | 2002 | Sp3 |
| Microsoft | Outlook | 2003 | — |
References
- http://secunia.com/advisories/18368Patch, Third Party Advisory
- http://securityreason.com/securityalert/330Third Party Advisory
- http://securityreason.com/securityalert/331Third Party Advisory
- http://securitytracker.com/id?1015460Patch, Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015461Patch, Third Party Advisory, VDB Entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-004.htmThird Party Advisory
- http://www.kb.cert.org/vuls/id/252146Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/421518/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/421520/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/16197Patch, Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA06-010A.htmlPatch, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/0119Permissions Required
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22878Third Party Advisory, VDB Entry
- http://secunia.com/advisories/18368Patch, Third Party Advisory
- http://securityreason.com/securityalert/330Third Party Advisory
- http://securityreason.com/securityalert/331Third Party Advisory
- http://securitytracker.com/id?1015460Patch, Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015461Patch, Third Party Advisory, VDB Entry
- http://support.avaya.com/elmodocs2/security/ASA-2006-004.htmThird Party Advisory
- http://www.kb.cert.org/vuls/id/252146Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/421518/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/archive/1/421520/100/0/threadedThird Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/16197Patch, Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA06-010A.htmlPatch, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2006/0119Permissions Required
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22878Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-0002?
How severe is CVE-2006-0002?
How do I fix CVE-2006-0002?
Are you affected by CVE-2006-0002?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST