CVE-2006-0002

published 2006-01-10

CVE-2006-0002: Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to…

Priority P3 50 high 7.5 CVSS 2.0

AV N AC L Au N C P I P A P

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.

Affected

9 ranges

Vendor	Product	Version range	Fixed in
microsoft	exchange_server	—	—
microsoft	exchange_server	—	—
microsoft	exchange_server	—	—
microsoft	office	—	—
microsoft	office	—	—
microsoft	office	—	—
microsoft	outlook	—	—
microsoft	outlook	—	—
microsoft	outlook	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.