VULNERABILITY INTELLIGENCE
CVE-2007-0213
CVSS score10 HIGH
EPSS probability66.16%
CISA KEVNot currently listed
Published2007-05-08
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Description
Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
Weakness classification
- CWE-20: Improper Input Validation
Primary references
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Broken Link
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Permissions Required
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Third Party Advisory