NVD

Id
58749  
Name
CVE-2006-0002  
Description
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2006-01-10  
Modified Date
2017-07-10  
Seq
2006-0002  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
301349 58749 CVE-2006-0002 oval:org.mitre.oval:def:1082  View
301350 58749 CVE-2006-0002 oval:org.mitre.oval:def:1165  View
301351 58749 CVE-2006-0002 oval:org.mitre.oval:def:1316  View
301352 58749 CVE-2006-0002 oval:org.mitre.oval:def:1456  View
301353 58749 CVE-2006-0002 oval:org.mitre.oval:def:1485  View
301354 58749 CVE-2006-0002 oval:org.mitre.oval:def:624  View
301355 58749 CVE-2006-0002 330  View
301356 58749 CVE-2006-0002 331  View
301357 58749 CVE-2006-0002 1015460  View
301358 58749 CVE-2006-0002 1015461  View
301359 58749 CVE-2006-0002 http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm  View
301360 58749 CVE-2006-0002 VU#252146  View
301361 58749 CVE-2006-0002 MS06-003  View
301362 58749 CVE-2006-0002 20060110 Microsoft Exchange Critical Vulnerability  View
301363 58749 CVE-2006-0002 20060110 Microsoft Outlook Critical Vulnerability  View
301364 58749 CVE-2006-0002 16197  View
301365 58749 CVE-2006-0002 TA06-010A  View
301366 58749 CVE-2006-0002 ADV-2006-0119  View
301367 58749 CVE-2006-0002 win-tnef-overflow(22878)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57816 JVNDB-2006-000012 Microsoft 製品における不正な TNEF メッセージにより任意のコードを実行される脆弱性 Microsoft Outlook および Microsoft Exchange Server には、Transport Neutral Encapsulation (TNEF) 形式の電子メールメッセージのデコード処理において不備があり、不正な TNEF メッセージを Microsoft Outlook で開く、あるいはプレビュー表示する、または Microsoft Exchange Server Information Store サービスにメッセージを処理させた場合に、任意のコードを実行される脆弱性が存在します。 CVE-2006-0002 16104 CVE-2006-0002 58749 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000012.html 2006-01-10 2007-04-01 View