CVE-2006-1305 — Microsoft Office vulnerability

CWE-3993 documents3 sources
Severity
4.3MEDIUMNVD
EPSS
51.8%
top 2.09%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Microsoft OfficeMicrosoft Outlook
Timeline
PublishedDec 31
Latest updateMay 1

Description

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.

CVSS vector

AV:N/AC:M/C:N/I:N/A:PExploitability: 8.6 | Impact: 2.9

Affected Packages2 packages

▶NVDmicrosoft/outlook2000, 2002, 2003+2
▶NVDmicrosoft/office2000, 2003, xp+2

Patches

Patch: secunia.com ↗Patch: securitytracker.com ↗Patch: www.securityfocus.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-qm5q-vj98-j24h: Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail reco↗2022-05-01
▶
CVEList
CVE-2006-1305: Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail reco↗2007-01-09
▶
CVE-2006-1305 — Microsoft Office vulnerability | cvebase