CVE-2006-0002
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5...
CVE-2006-0002 is a high vulnerability (CVSS 7.5) in Microsoft Office, published January 10, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 45.6%, the 98th percentile. No source names a fixed version.
- Severity
- 7.5 HighCVSS 2.0, NVD
- Exploit chance
- 45.6%EPSS, 98th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
- No fix listedNo source names one
Description
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
Exploit likelihood
Affected products
What each source reports
NVD Score used
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
- Record
CVE-2006-0002- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE ListNo score
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
- Record
CVE-2006-0002- Updated
- 2026-11-02
EUVDEUVD-2006-0010No score
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
- Record
EUVD-2006-0010- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pq9r-2xxh-vvh7No score
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5...
Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.
- Record
GHSA-pq9r-2xxh-vvh7- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1082
support.avaya.com/elmodocs2/security/ASA-2006-004.htm
securitytracker.com/id?1015460
securityfocus.com/archive/1/421520/100/0/threaded
Show 16 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/22878
securityreason.com/securityalert/331
vupen.com/english/advisories/2006/0119
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-003
secunia.com/advisories/18368
kb.cert.org/vuls/id/252146
us-cert.gov/cas/techalerts/TA06-010A.html
nvd.nist.gov/vuln/detail/CVE-2006-0002
github.com/advisories/GHSA-pq9r-2xxh-vvh7