Description
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
References
- oval:org.mitre.oval:def:1082 vdb-entry signature
- http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm
- oval:org.mitre.oval:def:1165 vdb-entry signature
- 1015460 vdb-entry
- 20060110 Microsoft Outlook Critical Vulnerability mailing-list
- oval:org.mitre.oval:def:624 vdb-entry signature
- win-tnef-overflow(22878) vdb-entry
- 331 third-party-advisory
- oval:org.mitre.oval:def:1485 vdb-entry signature
- oval:org.mitre.oval:def:1316 vdb-entry signature
- ADV-2006-0119 vdb-entry
- MS06-003 vendor-advisory
- oval:org.mitre.oval:def:1456 vdb-entry signature
- 330 third-party-advisory
- 16197 vdb-entry
- 20060110 Microsoft Exchange Critical Vulnerability mailing-list
- 18368 third-party-advisory
- VU#252146 third-party-advisory
- TA06-010A third-party-advisory
- 1015461 vdb-entry