CVE-2006-1305
Severity:
Pending analysis
Type:
CWE-399
Resource Management Errors
Publication date:
31/12/2006
Last modified:
18/10/2018
Description
Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.
Impact
Base Score 2.0
4.30
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:microsoft:office:2000:sp3:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:office:xp:sp3:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:office:2003:sp2:*:*:*:*:*:* | ||
cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://blogs.securiteam.com/index.php/archives/347
- http://linuxbox.org/pipermail/funsec/2006-March/005208.html
- http://osvdb.org/ref/24/24081-outlook1.txt
- http://secunia.com/advisories/23674
- http://securitytracker.com/id?1017488=
- http://www.kb.cert.org/vuls/id/617436
- http://www.osvdb.org/31253
- http://www.securityfocus.com/archive/1/457274/100/0/threaded
- http://www.securityfocus.com/bid/21937
- http://www.us-cert.gov/cas/techalerts/TA07-009A.html
- http://www.vupen.com/english/advisories/2007/0104
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-003
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A122