Description
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
References
- 19905 vdb-entry
- Q907245 vendor-advisory
- oval:org.mitre.oval:def:581 vdb-entry signature
- oval:org.mitre.oval:def:1406 vdb-entry signature
- VU#883460 third-party-advisory
- oval:org.mitre.oval:def:848 vdb-entry signature
- oval:org.mitre.oval:def:1515 vdb-entry signature
- win-cdo-bo(22495) vdb-entry
- 17167 third-party-advisory
- 15067 vdb-entry
- oval:org.mitre.oval:def:1420 vdb-entry signature
- MS05-048 vendor-advisory
- oval:org.mitre.oval:def:1201 vdb-entry signature
- oval:org.mitre.oval:def:1130 vdb-entry signature
- TA05-284A third-party-advisory
- 1015038 vdb-entry
- 20051012 [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability mailing-list
- 20051012 [SEC-1 Advisory] Collaboration Data Objects Buffer Overflow Vulnerability mailing-list
- 1015039 vdb-entry