CVE-2005-1987

critical

Description

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.

References

Advisories
More

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A848

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A581

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1515

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1420

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1406

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1201

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1130

https://exchange.xforce.ibmcloud.com/vulnerabilities/22495

http://www.us-cert.gov/cas/techalerts/TA05-284A.html

http://www.securityfocus.com/bid/15067

http://www.kb.cert.org/vuls/id/883460

http://securitytracker.com/id?1015039

http://securitytracker.com/id?1015038

http://secunia.com/advisories/17167

http://marc.info/?l=bugtraq&m=112915118302012&w=2

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2005/ms05-048

http://support.microsoft.com/default.aspx?scid=kb%3B%5BLN%5D%3BQ907245

Details

Source: Mitre, NVD

Published: 2005-10-13

Updated: 2025-04-03

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.7207