CVEvulnerability
CVE-2005-1987
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-10-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-120
Description
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
Affected configurations
• microsoft exchange server 2000
• microsoft windows 2000
• microsoft windows server 2003
• microsoft windows server 2003 r2
• microsoft windows server 2003 sp1
• microsoft windows xp
Related
Weakness · CWE (1)
- CWE-120 Buffer Copy without Checking Size of Input weakness
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html Broken Link
- http://marc.info/?l=bugtraq&m=112915118302012&w=2 Mailing List, Third Party Advisory
- http://secunia.com/advisories/17167 Third Party Advisory
- http://securitytracker.com/id?1015038 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015039 Third Party Advisory, VDB Entry
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245 support.microsoft.com
- http://www.kb.cert.org/vuls/id/883460 Third Party Advisory, US Government Resource
- http://www.osvdb.org/19905 Broken Link
- http://www.securityfocus.com/bid/15067 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA05-284A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22495 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1130 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1201 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1515 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A848 Third Party Advisory
- http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html Broken Link
- http://marc.info/?l=bugtraq&m=112915118302012&w=2 Mailing List, Third Party Advisory
- http://secunia.com/advisories/17167 Third Party Advisory
- http://securitytracker.com/id?1015038 Third Party Advisory, VDB Entry
- http://securitytracker.com/id?1015039 Third Party Advisory, VDB Entry
- http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245 support.microsoft.com
- http://www.kb.cert.org/vuls/id/883460 Third Party Advisory, US Government Resource
- http://www.osvdb.org/19905 Broken Link
- http://www.securityfocus.com/bid/15067 Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA05-284A.html Third Party Advisory, US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048 Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22495 Third Party Advisory, VDB Entry
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1130 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1201 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1515 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581 Third Party Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A848 Third Party Advisory