CVE-2006-0002

Description

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.

7.5

CVSS

Severity: High

CVSS 2.0 •

EPSS 56.18% Top 5%

Vendor Advisory microsoft.com

Affected: n/a n/a

References

Link	Tags
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1082	vdb entry third party advisory signature
http://support.avaya.com/elmodocs2/security/ASA-2006-004.htm	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1165	vdb entry third party advisory signature
http://securitytracker.com/id?1015460	vdb entry third party advisory patch
http://www.securityfocus.com/archive/1/421520/100/0/threaded	mailing list vdb entry third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A624	vdb entry third party advisory signature
https://exchange.xforce.ibmcloud.com/vulnerabilities/22878	vdb entry third party advisory
http://securityreason.com/securityalert/331	third party advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1485	vdb entry third party advisory signature
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1316	vdb entry third party advisory signature
http://www.vupen.com/english/advisories/2006/0119	vdb entry permissions required
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003	patch vendor advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1456	vdb entry third party advisory signature
http://securityreason.com/securityalert/330	third party advisory
http://www.securityfocus.com/bid/16197	vdb entry third party advisory patch
http://www.securityfocus.com/archive/1/421518/100/0/threaded	mailing list vdb entry third party advisory
http://secunia.com/advisories/18368	third party advisory patch
http://www.kb.cert.org/vuls/id/252146	third party advisory us government resource
http://www.us-cert.gov/cas/techalerts/TA06-010A.html	us government resource third party advisory patch
http://securitytracker.com/id?1015461	vdb entry third party advisory patch

Frequently Asked Questions

What is the severity of CVE-2006-0002?: CVE-2006-0002 has been scored as a high severity vulnerability.
How to fix CVE-2006-0002?: To fix CVE-2006-0002, make sure you are using an up-to-date version of the affected component(s) by checking the vendor release notes. As for now, there are no other specific guidelines available.
Is CVE-2006-0002 being actively exploited in the wild?: It is possible that CVE-2006-0002 is being exploited or will be exploited in a near future based on public information. According to its EPSS score, there is a ~56% probability that this vulnerability will be exploited by malicious actors in the next 30 days.