Unscored severity · published Jan 10, 2006
CVE-2006-0002
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary…
–
CVSS
45.6%
EPSS
No
On KEV
Description
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
Exploitation
Is it being used?
Exploit prediction (EPSS)45.6% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Exchange Server · Microsoft
5.0; 5.0; 5.0; 5.5; 5.5; 5.5; +3 more · source: NVD
OF
Office · Microsoft
2000; 2003; 2003; xp · source: NVD
OU
Outlook · Microsoft
2000; 2002; 2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0002
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0002
Patch
http://secunia.com/advisories/18368
Third Party Advisory
http://securityreason.com/securityalert/330
Third Party Advisory
http://securityreason.com/securityalert/331
Patch
http://securitytracker.com/id?1015460
Patch
http://securitytracker.com/id?1015461
Third Party Advisory
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm
More from Exchange Server
9.8
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability
9.1
CVE-2021-34473
Microsoft Exchange Server Remote Code Execution Vulnerability
9.1
CVE-2021-26855
Microsoft Exchange Server Remote Code Execution Vulnerability
9.0
CVE-2021-34523
Microsoft Exchange Server Elevation of Privilege Vulnerability
8.8
CVE-2023-21529
Microsoft Exchange Server Remote Code Execution Vulnerability