CVE-2006-0002 Information

Description

Unspecified vulnerability in Microsoft Outlook 2000 through 2003 Exchange 5.0 Server SP2 and 5.5 SP4 Exchange 2000 SP3 and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment related to message length validation.

Reference

http://secunia.com/advisories/18368 http://securityreason.com/securityalert/330 http://securityreason.com/securityalert/331 http://securitytracker.com/id?1015460 http://securitytracker.com/id?1015461 http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm http://www.kb.cert.org/vuls/id/252146 http://www.securityfocus.com/archive/1/421518/100/0/threaded http://www.securityfocus.com/archive/1/421520/100/0/threaded http://www.securityfocus.com/bid/16197 http://www.us-cert.gov/cas/techalerts/TA06-010A.html http://www.vupen.com/english/advisories/2006/0119 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003 https://exchange.xforce.ibmcloud.com/vulnerabilities/22878 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1082 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1165 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1316 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1456 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A1485 https://oval.cisecurity.org/repository/search/definition/oval3Aorg.mitre.oval3Adef3A624