Microsoft Exchange and Outlook TNEF Decoding Integer Overflow (CVE-2006-0002)

A buffer overflow vulnerability exists in the way Microsoft Exchange and Microsoft Outlook process TNEF encoded messages. When the TNEF decoder used by these products processes a TNEF object record with a large size value, an integer overflow can occur. An attacker potentially can exploit this...

Microsoft Exchange Server TNEF Decoding Remote Code Execution Vulnerability

Description Microsoft Exchange Server is prone to a remote code-execution vulnerability. Remote attackers may exploit this issue by sending maliciously constructed TNEF-encoded email data to vulnerable servers. This issue will be triggered when a user views or previews the malicious email...

Microsoft Outlook / Exchange TNEF Decoding Arbitrary Code Execution

Binary data 3365.prm...

Update Protection against a Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange (MS06-003)

A vulnerability exists in the way Microsoft Exchange server and Microsoft Outlook products handle the decoding of the Transport Neutral Encapsulation TNEF MIME attachment. The TNEF format is used by many Microsoft products such as Exchange and Outlook to transfer messages formatted as Rich Text...

MS06-003: Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412)

The remote host is running a version of Outlook or Exchange containing a bug in the Transport Neutral Encapsulation Format TNEF MIME attachment handling routine that could allow an attacker execute arbitrary code on the remote host by sending a specially crafted email. C Tenable Network Security,...