CVE-2005-1987: Buffer Overflow
Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2005-1987?
CVE-2005-1987 has a severity rating of critical, as it allows remote code execution.
How do I fix CVE-2005-1987?
To fix CVE-2005-1987, apply the latest patches provided by Microsoft for affected software.
What software is affected by CVE-2005-1987?
CVE-2005-1987 affects Microsoft Exchange Server 2000 SP3, Microsoft Windows 2000 SP4, and various versions of Windows Server 2003 and Windows XP.
What type of attack does CVE-2005-1987 enable?
CVE-2005-1987 enables remote attackers to execute arbitrary code via specially crafted email messages.
Should I be concerned about CVE-2005-1987?
Yes, CVE-2005-1987 poses significant risk, especially for systems running the affected Microsoft software that accepts email messages.