CVE-2005-1987

high Microsoft
CVSS v3 Base Score
7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS Score
57.0%
Exploitation probability in 30 days
Top 2% most likely to be exploited
Attack Characteristics
Attack Vector
Network
Attack Complexity
Low
Confidentiality
P
Integrity
P
Availability
P
Published: October 13, 2005 (7518 days ago)
Last Modified: April 16, 2026
Vendor: Microsoft
Source: NVD

Description

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.

CWE

CWE-120

Affected Products

microsoft exchange servermicrosoft windows 2000microsoft windows server 2003microsoft windows xp

References

🔗 archives.neohapsis.com 🔗 marc.info 🔗 secunia.com 🔗 securitytracker.com 🔗 securitytracker.com