CVE-2008-7105: Undefined Security Weakness

Sophos PureMessage for Microsoft Exchange 3.0 before 3.0.2 allows remote attackers to cause a denial of service EdgeTransport.exe termination via a TNEF-encoded message with a crafted rich text body that is not properly handled during conversion to plain text. NOTE: this might be related to...

Exchange Server TNEF解码内存破坏漏洞（MS09-003）

BUGTRAQ ID: 33134 CVECAN ID: CVE-2009-0098 Microsoft Exchange Server是一款企业级的邮件服务程序。 Microsoft Exchange Server解码消息的传输中性封装格式（TNEF）数据时存在内存破坏漏洞。如果用户预览了以TNEF格式发送的特制邮件消息，或Microsoft Exchange Server Information Store处理了特制的邮件消息，就可以触发这个漏洞，导致执行任意代码。 Microsoft Exchange Server 2007 SP1 Microsoft Exchange Serve...

Microsoft Security Bulletin MS09-003 - Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution (959239)

Microsoft Security Bulletin MS09-003 - Critical Vulnerabilities in Microsoft Exchange Could Allow Remote Code Execution 959239 Published: February 10, 2009 Version: 1.0 General Information Executive Summary This security update resolves two privately reported vulnerabilities in Microsoft Exchange...

Microsoft Exchange multiple security vulnerabilities

Memory corruption on TNEF Exchange format messages parsing, DoS...

Memory corruption

Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation TNEF properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."...

CVE-2009-0098

Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation TNEF properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."...

CVE-2009-0098

CVE-2009-0098 describes a memory corruption vulnerability in Microsoft Exchange Server (2000 SP3, 2003 SP2, 2007 SP1) where TNEF message properties are not interpreted correctly, allowing remote code execution via a crafted TNEF message. Microsoft published MS09-003 detailing the vulnerability an...

CVE-2009-0098

Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation TNEF properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."...

CVE-2009-0098: Undefined Security Weakness

Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation TNEF properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."...

Microsoft Exchange Server TNEF Decoding Remote Code Execution Vulnerability

Description Microsoft Exchange Server is prone to a remote code-execution vulnerability. Remote attackers may exploit this issue by sending maliciously constructed TNEF-encoded email data to vulnerable servers. This issue will be triggered when a user views or previews the malicious email...

Microsoft Exchange Server MS-TNEF Memory Corruption (MS09-003; CVE-2009-0098)

The Microsoft Exchange Server is an implementation of an email server capable of handling numerous Internet protocol, including the Simple Mail Transfer Protocol SMTP. Transport Neutral Encapsulation Format TNEF is a format used by the Microsoft Exchange Server when sending messages formatted as...

MailScanner Multiple Insecure Temporary Files Vulnerabilities

MailScanner is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Outlook/Exchange TNEF解码远程代码执行漏洞（MS06-003）

Microsoft Outlook和Exchange都是微软发布的邮件处理软件。 Microsoft Outlook和Microsoft Exchange Server解码传输中立封装格式（TNEF）MIME附件的方式存在漏洞，攻击者可能利用此漏洞在机器上执行任意指令。 攻击者可以创建特制的TNEF消息，如果用户打开或浏览了恶意的邮件消息或Microsoft Exchange Server Information Store处理了该特制消息的话，就可能执行任意代码。 Microsoft Exchange Server 5.5 Microsoft Exchange Server 5.0...

Microsoft Outlook / Exchange TNEF Decoding Arbitrary Code Execution

Binary data 3365.prm...

Update Protection against a Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange (MS06-003)

A vulnerability exists in the way Microsoft Exchange server and Microsoft Outlook products handle the decoding of the Transport Neutral Encapsulation TNEF MIME attachment. The TNEF format is used by many Microsoft products such as Exchange and Outlook to transfer messages formatted as Rich Text...

Microsoft Exchange Server and Microsoft Outlook TNEF messages format buffer overflow

Buffer overflow on parsing TNEF format...

CVE-2006-0002

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

CVE-2006-0002

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format TNEF MIME attachment, related to messa...

CVE-2006-0002

CVE-2006-0002 is a TNEF decoding vulnerability in Microsoft Outlook (2000–2003) and Microsoft Exchange Server (5.0 SP2, 5.5 SP4, 2000 SP3) where processing a crafted TNEF MIME attachment can lead to remote code execution. Root cause described as improper handling/validation of TNEF data, enabling...

MS06-003: Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412)

The remote host is running a version of Outlook or Exchange containing a bug in the Transport Neutral Encapsulation Format TNEF MIME attachment handling routine that could allow an attacker execute arbitrary code on the remote host by sending a specially crafted email. C Tenable Network Security,...