CVE-2005-1987
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft...
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
- Record
CVE-2005-1987- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-120
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
- Record
CVE-2005-1987- Updated
- 2026-11-02
EUVDEUVD-2005-1989 No score
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
- Record
EUVD-2005-1989- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pfww-hw2q-8mc3 No score
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft...
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
- Record
GHSA-pfww-hw2q-8mc3- Weakness
- CWE-120
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2005-1987 is a high vulnerability (CVSS 7.5) in Microsoft Exchange Server, published October 13, 2005. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 43.4%, the 98th percentile. No source names a fixed version.
References
osvdb.org/19905
support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581
kb.cert.org/vuls/id/883460
Show 16 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/22495
secunia.com/advisories/17167
securityfocus.com/bid/15067
docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048
us-cert.gov/cas/techalerts/TA05-284A.html
securitytracker.com/id?1015038
archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html
marc.info?l=bugtraq&m=112915118302012&w=2
nvd.nist.gov/vuln/detail/CVE-2005-1987
github.com/advisories/GHSA-pfww-hw2q-8mc3