Lucene search

K
cve[email protected]CVE-2005-1987
HistoryOct 13, 2005 - 10:02 a.m.

CVE-2005-1987

2005-10-1310:02:00
CWE-120
web.nvd.nist.gov
21
cve-2005-1987
buffer overflow
collaboration data objects
cdo
microsoft windows
microsoft exchange server
remote code execution
email security

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.901 High

EPSS

Percentile

98.8%

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the “Content-Type” string.

References

7.9 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.901 High

EPSS

Percentile

98.8%