CVE-2007-0213: Input Validation

Published May 8, 2007

Updated

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.

Affected Software

4 affected components

Microsoft Exchange Server=2000-sp3

Microsoft Exchange Server=2003-sp1

Microsoft Exchange Server=2003-sp2

Microsoft Exchange Server=2007

Remediation

Patch Available

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026

Event History

May 8, 2007

CVE Published

11:19 PM

May 9, 2007

CVE Published

via MITRE·03:00 AM

Data Sourced

via MITRE·03:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2007-0213?

CVE-2007-0213 is considered critical due to the potential for remote code execution via specially crafted emails.

How do I fix CVE-2007-0213?

To fix CVE-2007-0213, apply the latest security patches and updates provided by Microsoft for affected versions of Exchange Server.

Which versions of Microsoft Exchange Server are affected by CVE-2007-0213?

CVE-2007-0213 affects Microsoft Exchange Server 2000 SP3, 2003 SP1, 2003 SP2, and 2007.

What type of attacks can occur due to CVE-2007-0213?

CVE-2007-0213 allows remote attackers to execute arbitrary code via a malformed base64-encoded MIME email.

Is there a workaround for CVE-2007-0213?

Disabling MIME decoding features may serve as a temporary workaround until the appropriate patches are applied for CVE-2007-0213.