Buffer Overflow in Collaboration Data Objects (CDO) Allows Remote Code Execution

CVE-2005-1987 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.

Learn more about our Cis Benchmark Audit For Microsoft Exchange Server.