VULNERABILITY INTELLIGENCE
CVE-2006-0002
CVSS score7.5 HIGH
EPSS probability45.58%
CISA KEVNot currently listed
Published2006-01-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
Primary references
- secure@microsoft.com — Patch, Third Party Advisory
- secure@microsoft.com — Third Party Advisory
- secure@microsoft.com — Third Party Advisory
- secure@microsoft.com — Patch, Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Third Party Advisory, US Government Resource
- secure@microsoft.com — Permissions Required