CVE-2006-0002

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5...

7.5 High

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.

Exploit likelihood

45.6%Down 1.1 points since Feb 4, 2022

What each source reports

NVD Score used 7.5

Record: CVE-2006-0002
CVSS 2.0: 7.5 HighAV:N/AC:L/Au:N/C:P/I:P/A:P
Updated: 2026-11-02

CVE List No score

Record: CVE-2006-0002
Updated: 2026-11-02

EUVDEUVD-2006-0010 No score

Record: EUVD-2006-0010
Updated: 2026-11-03

GitHub AdvisoriesGHSA-pq9r-2xxh-vvh7 No score

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5...

Record: GHSA-pq9r-2xxh-vvh7
Updated: 2026-11-02

Affected products

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2006-0002 is a high vulnerability (CVSS 7.5) in Microsoft Office, published January 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 45.6%, the 98th percentile. No source names a fixed version.

References

Show 16 moreShow less