Unscored severity · published May 10, 2006
CVE-2006-0027
Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties
–
CVSS
78.7%
EPSS
No
On KEV
Description
Unspecified vulnerability in Microsoft Exchange allows remote attackers to execute arbitrary code via e-mail messages with crafted (1) vCal or (2) iCal Calendar properties.
Exploitation
Is it being used?
Exploit prediction (EPSS)78.7% · higher than 100% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
ES
Exchange Server · Microsoft
2000; 2003; 2003 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-0027
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-0027
Third Party Advisory
http://secunia.com/advisories/20029
Third Party Advisory
http://securitytracker.com/id?1016048
Patch
http://www.kb.cert.org/vuls/id/303452
Broken Link
http://www.osvdb.org/25338
Third Party Advisory
http://www.securityfocus.com/bid/17908
Patch
http://www.us-cert.gov/cas/techalerts/TA06-129A.html
More from Exchange Server
9.8
CVE-2024-21410
Microsoft Exchange Server Elevation of Privilege Vulnerability
9.1
CVE-2021-34473
Microsoft Exchange Server Remote Code Execution Vulnerability
9.1
CVE-2021-26855
Microsoft Exchange Server Remote Code Execution Vulnerability
9.0
CVE-2021-34523
Microsoft Exchange Server Elevation of Privilege Vulnerability
8.8
CVE-2023-21529
Microsoft Exchange Server Remote Code Execution Vulnerability