CVE-2005-1987

Description

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.

Weakness classification

• CWE-120: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')

Primary references

• secure@microsoft.com — Broken Link
• secure@microsoft.com — Mailing List, Third Party Advisory
• secure@microsoft.com — Third Party Advisory
• secure@microsoft.com — Third Party Advisory, VDB Entry
• secure@microsoft.com — Third Party Advisory, VDB Entry
• secure@microsoft.com
• secure@microsoft.com — Third Party Advisory, US Government Resource
• secure@microsoft.com — Broken Link
• secure@microsoft.com — Third Party Advisory, VDB Entry
• secure@microsoft.com — Third Party Advisory, US Government Resource
• secure@microsoft.com — Patch, Vendor Advisory
• secure@microsoft.com — Third Party Advisory, VDB Entry