deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2005-3151
Published: 2005-10-05
Description: Buffer overflow in blenderplay in Blender Player 2.37a allows attackers to execute arbitrary code via a long command line argument.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17013; http://www.securiteam.com/exploits/5BP0T2KGVA.html; http://www.securityfocus.com/bid/14983
CVE: CVE-2005-3152
Published: 2005-10-05
Description: Multiple cross-site scripting (XSS) vulnerabilities in CubeCart 3.0.3 allow remote attackers to inject arbitrary web script or HTML via the redir parameter to (1) cart.php or (2) index.php, or (3) the searchStr parameter in a viewCat action to index.php.  Note: vectors (1) and (2) were later reported to affect 3.0.7-pl1.
CVSS Score: 4.3 (MEDIUM)
References: http://bugs.cubecart.com/?do=details&id=363; http://bugs.cubecart.com/?do=details&id=459; http://lostmon.blogspot.com/2005/09/cubecart-303-multiple-variable-cross.html
CVE: CVE-2005-3153
Published: 2005-10-05
Description: login.php in myBloggie 2.1.3 beta and earlier allows remote attackers to bypass a whitelist regular expression and conduct SQL injection attacks via a username parameter with SQL after a null character, which causes the whitelist check to succeed but injects the SQL into a query string, a different vulnerability than CVE-2005-2838.  NOTE: it is possible that this is actually a bug in PHP code, in which case this should not be treated as a myBloggie vulnerability.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7878&w=2; http://mywebland.com/forums/showtopic.php?t=399; http://rgod.altervista.org/mybloggie213b.html
CVE: CVE-2005-3154
Published: 2005-10-05
Description: Format string vulnerability in the logging functionality in BitDefender AntiVirus 7.2 through 9 allows remote attackers to cause a denial of service and possibly execute arbitrary code via format string specifiers in file or directory name.
CVSS Score: 7.5 (HIGH)
CWE: CWE-134
References: http://kb.bitdefender.com/KB261-en--Filename-Format-String-Vulnerability.html; http://secunia.com/advisories/16991; http://securityreason.com/securityalert/45
CVE: CVE-2005-3155
Published: 2005-10-05
Description: Buffer overflow in the W3C logging for MailEnable Enterprise 1.1 and Professional 1.6 allows remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17010; http://securitytracker.com/id?1014999; http://www.mailenable.com/hotfix/
CVE: CVE-2005-3156
Published: 2005-10-05
Description: Directory traversal vulnerability in printfaq.php in EasyGuppy (Guppy for Windows) 4.5.4 and 4.5.5 allows remote attackers to read arbitrary files via ".." sequences in the pg parameter, which is cleansed for XSS but not directory traversal.
CVSS Score: 4.3 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]7394&w=2; http://marc.info/?l=bugtraq&m=[PII_REDACTED]7394&w=2
CVE: CVE-2005-3157
Published: 2005-10-06
Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.109 allows remote attackers to execute arbitrary SQL commands via the msg_send parameter, a different vulnerability than CVE-2005-3158 and CVE-2005-3159.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]4963&w=2; http://rgod.altervista.org/phpfusion600109.html; http://secunia.com/advisories/16994
CVE: CVE-2005-3158
Published: 2005-10-06
Description: SQL injection vulnerability in messages.php in PHP-Fusion 6.00.106 and 6.00.107 allows remote attackers to execute arbitrary SQL commands via the (1) pm_email_notify and (2) pm_save_sent parameters, a different vulnerability than CVE-2005-3157 and CVE-2005-3159.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0944&w=2; http://www.gnucitizen.org/writings/php-fusion-messages.php-sql-injection-vulnerability.xhtml; http://marc.info/?l=bugtraq&m=[PII_REDACTED]0944&w=2
CVE: CVE-2005-3159
Published: 2005-10-06
Description: SQL injection vulnerability in messages.php in PHP-Fusion allows remote attackers to execute arbitrary SQL commands via the msg_view parameter, a different vulnerability than CVE-2005-3157 and CVE-2005-3158.
CVSS Score: 7.5 (HIGH)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]0676&w=2; http://www.osvdb.org/18708; http://www.s4a.cc/forum/archive/index.php/t-3585.html
CVE: CVE-2005-3160
Published: 2005-10-06
Description: Multiple SQL injection vulnerabilities in photogallery.php in PHP-Fusion allow remote attackers to execute arbitrary SQL commands via the (1) album and (2) photo parameters.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17048; http://www.osvdb.org/19841; http://secunia.com/advisories/17048
CVE: CVE-2005-3161
Published: 2005-10-06
Description: Multiple SQL injection vulnerabilities in PHP-Fusion before 6.00.110 allow remote attackers to execute arbitrary SQL commands via (1) the activate parameter in register.php and (2) the cat_id parameter in faq.php.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17055; http://secunia.com/secunia_research/2005-52/advisory/; http://securityreason.com/securityalert/54
CVE: CVE-2005-3162
Published: 2005-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3160.  Reason: this candidate is a duplicate of CVE-2005-3160.  Notes: All CVE users should reference CVE-2005-3160 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3163
Published: 2005-10-06
Description: Unspecified vulnerability in Polipo 0.9.8 and earlier allows attackers to read files outside of the web root.
CVSS Score: 5.0 (MEDIUM)
References: http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text; http://www.securityfocus.com/bid/14970; http://www.pps.jussieu.fr/~jch/software/polipo/CHANGES.text
CVE: CVE-2005-3164
Published: 2005-10-06
Description: The AJP connector in Apache Tomcat 4.0.1 through 4.0.6 and 4.1.0 through 4.1.36, as used in Hitachi Cosminexus Application Server and standalone, does not properly handle when a connection is broken before request body data is sent in a POST request, which can lead to an information leak when "unsuitable request body data" is used for a different request, possibly related to Java Servlet pages.
CVSS Score: 2.6 (LOW)
CWE: CWE-200
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://lists.apple.com/archives/security-announce/2008//Jun/msg00002.html; http://secunia.com/advisories/17019
CVE: CVE-2005-3165
Published: 2005-10-06
Description: Multiple cross-site scripting (XSS) vulnerabilities in MediaWiki before 1.4.9 allow remote attackers to inject arbitrary web script or HTML via (1) <math> tags or (2) Extension or <nowiki> sections that "bypass HTML style attribute restrictions" that are intended to protect against XSS vulnerabilities in Internet Explorer clients.
CVSS Score: 4.3 (MEDIUM)
References: http://lwn.net/Articles/153906/; http://secunia.com/advisories/16932; http://sourceforge.net/project/shownotes.php?release_id=352777
CVE: CVE-2005-3166
Published: 2005-10-06
Description: Unspecified vulnerability in "edit submission handling" for MediaWiki 1.4.x before 1.4.10 and 1.3.x before 1.3.16 allows remote attackers to cause a denial of service (corruption of the previous submission) via a crafted URL.
CVSS Score: 5.0 (MEDIUM)
References: http://sourceforge.net/project/shownotes.php?release_id=358163; http://www.novell.com/linux/security/advisories/2005_22_sr.html; http://www.osvdb.org/19956
CVE: CVE-2005-3167
Published: 2005-10-06
Description: Incomplete blacklist vulnerability in MediaWiki before 1.4.11 does not properly remove certain CSS inputs (HTML inline style attributes) that are processed as active content by Internet Explorer, which allows remote attackers to conduct cross-site scripting (XSS) attacks.
CVSS Score: 4.3 (MEDIUM)
References: http://secunia.com/advisories/17074; http://sourceforge.net/project/shownotes.php?release_id=361505; http://www.novell.com/linux/security/advisories/2005_27_sr.html
CVE: CVE-2005-3168
Published: 2005-10-06
Description: The SECEDIT command on Microsoft Windows 2000 before Update Rollup 1 for SP4, when using a security template to set Access Control Lists (ACLs) on folders, does not apply ACLs on folders that are listed after a long folder entry, which could result in less secure permissions than specified by the template.
CVSS Score: 7.5 (HIGH)
References: http://support.microsoft.com/kb/834424/; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/834424/
CVE: CVE-2005-3169
Published: 2005-10-06
Description: Microsoft Windows 2000 before Update Rollup 1 for SP4, when the "audit directory service access" policy is enabled, does not record a 565 event message for File Delete Child operations on an Active Directory object in the security event log, which could allow attackers to conduct unauthorized activities without detection.
CVSS Score: 5.0 (MEDIUM)
References: http://support.microsoft.com/kb/833873; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/833873
CVE: CVE-2005-3170
Published: 2005-10-06
Description: The LDAP client on Microsoft Windows 2000 before Update Rollup 1 for SP4 accepts certificates using LDAP Secure Sockets Layer (LDAPS) even when the Certificate Authority (CA) is not trusted, which could allow attackers to trick users into believing that they are accessing a trusted site.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-295, CWE-295
References: http://support.microsoft.com/kb/883639; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/883639
CVE: CVE-2005-3171
Published: 2005-10-06
Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 records Event ID 1704 to indicate that Group Policy security settings were successfully updated, even when the processing fails such as when Ntuser.pol cannot be accessed, which could cause system administrators to believe that the system is compliant with the specified settings.
CVSS Score: 4.6 (MEDIUM)
References: http://support.microsoft.com/kb/884559; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/884559
CVE: CVE-2005-3172
Published: 2005-10-06
Description: The WideCharToMultiByte function in Microsoft Windows 2000 before Update Rollup 1 for SP4 does not properly convert strings with Japanese composite characters in the last character, which could prevent the string from being null terminated and lead to data corruption or enable buffer overflow attacks.
CVSS Score: 5.0 (MEDIUM)
References: http://support.microsoft.com/kb/824867; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/824867
CVE: CVE-2005-3173
Published: 2005-10-06
Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 does not apply group policies if the user logs on using UPN credentials with a trailing dot, which prevents Windows 2000 from finding the correct domain controller and could allow the user to bypass intended restrictions.
CVSS Score: 4.6 (MEDIUM)
References: http://support.microsoft.com/kb/821102; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/821102
CVE: CVE-2005-3174
Published: 2005-10-06
Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 allows users to log on to the domain, even when their password has expired, if the fully qualified domain name (FQDN) is 8 characters long.
CVSS Score: 4.6 (MEDIUM)
References: http://support.microsoft.com/kb/830847; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/830847
CVE: CVE-2005-3175
Published: 2005-10-06
Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 allows a local administrator to unlock a computer even if it has been locked by a domain administrator, which allows the local administrator to access the session as the domain administrator.
CVSS Score: 7.2 (HIGH)
References: http://support.microsoft.com/kb/842742; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/842742
CVE: CVE-2005-3176
Published: 2005-10-06
Description: Microsoft Windows 2000 before Update Rollup 1 for SP4 does not record the IP address of a Windows Terminal Services client in a security log event if the client connects successfully, which could make it easier for attackers to escape detection.
CVSS Score: 7.5 (HIGH)
References: http://support.microsoft.com/kb/891076; http://support.microsoft.com/kb/900345; http://support.microsoft.com/kb/891076
CVE: CVE-2005-3177
Published: 2005-10-06
Description: CHKDSK in Microsoft Windows 2000 before Update Rollup 1 for SP4, Windows XP, and Windows Server 2003, when running in fix mode, does not properly handle security descriptors if the master file table contains a large number of files or if the descriptors do not satisfy certain NTFS conventions, which could cause ACLs for some files to be reverted to less secure defaults, or cause security descriptors to be removed.
CVSS Score: 4.6 (MEDIUM)
References: http://support.microsoft.com/kb/831374; http://support.microsoft.com/kb/831375; http://support.microsoft.com/kb/900345
CVE: CVE-2005-3117
Published: 2005-10-06
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3150.  Reason: This candidate was privately assigned by a CNA to an issue, but the issue was published through separate channels and assigned a new identifier by the MITRE CNA, so it is a duplicate of CVE-2005-3150. Notes: All CVE users should reference CVE-2005-3150 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3118
Published: 2005-10-06
Description: Mason before 1.0.0 does not install the init script after the user uses Mason to configure a firewall, which causes the system to run without a firewall after a reboot.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17084; http://www.debian.org/security/2005/dsa-845; http://www.osvdb.org/19875
CVE: CVE-2005-1764
Published: 2005-10-07
Description: Linux 2.6.11 on 64-bit x86 (x86_64) platforms does not use a guard page for the 47-bit address page to protect against an AMD K8 bug, which allows local users to cause a denial of service.
CVSS Score: 2.1 (LOW)
References: http://freshmeat.net/articles/view/1678/; http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commit%3Bh=637716a3825e[PII_REDACTED]4aa1fa3c0ebf8018b; http://www.kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=637716a3825e[PII_REDACTED]4aa1fa3c0ebf8018b
CVE: CVE-2005-2104
Published: 2005-10-07
Description: sysreport before 1.3.7 allows local users to obtain sensitive information via a symlink attack on a temporary directory.
CVSS Score: 2.1 (LOW)
References: http://secunia.com/advisories/16381; http://secunia.com/advisories/17539; http://securitytracker.com/id?1014653
CVE: CVE-2005-2497
Published: 2005-10-07
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-2641.  Reason: This candidate is a duplicate of CVE-2005-2641.  Notes: All CVE users should reference CVE-2005-2641 instead of this candidate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3178
Published: 2005-10-07
Description: Buffer overflow in xloadimage 4.1 and earlier, and xli, might allow user-assisted attackers to execute arbitrary code via a long title name in a NIFF file, which triggers the overflow during (1) zoom, (2) reduce, or (3) rotate operations.
CVSS Score: 5.1 (MEDIUM)
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2005.62/SCOSA-2005.62.txt; ftp://ftp.sco.com/pub/updates/UnixWare/SCOSA-2005.56/SCOSA-2005.56.txt; http://marc.info/?l=bugtraq&m=[PII_REDACTED]8840&w=2
CVE: CVE-2005-2337
Published: 2005-10-07
Description: Ruby 1.6.x up to 1.6.8, 1.8.x up to 1.8.2, and 1.9.0 development up to 2005-09-01 allows attackers to bypass safe level and taint flag protections and execute disallowed code when Ruby processes a program through standard input (stdin).
CVSS Score: 7.5 (HIGH)
References: http://jvn.jp/jp/JVN%[PII_REDACTED]/index.html; http://lists.apple.com/archives/security-announce/2006/May/msg00003.html; http://secunia.com/advisories/16904
CVE: CVE-2005-3119
Published: 2005-10-12
Description: Memory leak in the request_key_auth_destroy function in request_key_auth in Linux kernel 2.6.10 up to 2.6.13 allows local users to cause a denial of service (memory consumption) via a large number of authorization token keys.
CVSS Score: 2.1 (LOW)
CWE: CWE-401
References: http://linux.bkbits.net:8080/linux-2.6/cset%4043483fddCiQX1WyG_orbko06TrjMVA; http://secunia.com/advisories/17114; http://secunia.com/advisories/17364
CVE: CVE-2005-3179
Published: 2005-10-12
Description: drm.c in Linux kernel 2.6.10 to 2.6.13 creates a debug file in sysfs with world-readable and world-writable permissions, which allows local users to enable DRM debugging and obtain sensitive information.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://bugs.gentoo.org/show_bug.cgi?id=107893; http://secunia.com/advisories/17114; http://secunia.com/advisories/17280
CVE: CVE-2005-1978
Published: 2005-10-12
Description: COM+ in Microsoft Windows does not properly "create and use memory structures," which allows local users or remote attackers to execute arbitrary code.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17161; http://secunia.com/advisories/17172; http://secunia.com/advisories/17223
CVE: CVE-2005-1979
Published: 2005-10-12
Description: Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service exception and exit) via an "unexpected protocol command during the reconnection request," which is not properly handled by the Transaction Internet Protocol (TIP) functionality.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17161; http://secunia.com/advisories/17172; http://secunia.com/advisories/17223
CVE: CVE-2005-1980
Published: 2005-10-12
Description: Distributed Transaction Controller in Microsoft Windows allows remote servers to cause a denial of service (MSDTC service hang) via a crafted Transaction Internet Protocol (TIP) message that causes DTC to repeatedly connect to a target IP and port number after an error occurs, aka the "Distributed TIP Vulnerability."
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17161; http://secunia.com/advisories/17172; http://secunia.com/advisories/17223
CVE: CVE-2005-2119
Published: 2005-10-12
Description: The MIDL_user_allocate function in the Microsoft Distributed Transaction Coordinator (MSDTC) proxy (MSDTCPRX.DLL) allocates a 4K page of memory regardless of the required size, which allows attackers to overwrite arbitrary memory locations using an incorrect size value that is provided to the NdrAllocate function, which writes management data to memory outside of the allocated buffer.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17161; http://secunia.com/advisories/17172; http://secunia.com/advisories/17223
CVE: CVE-2005-2128
Published: 2005-10-12
Description: QUARTZ.DLL in Microsoft Windows Media Player 9 allows remote attackers to write a null byte to arbitrary memory via an AVI file with a crafted strn element with a modified length value.
CVSS Score: 5.0 (MEDIUM)
References: http://secunia.com/advisories/17160; http://secunia.com/advisories/17172; http://secunia.com/advisories/17509
CVE: CVE-2005-2925
Published: 2005-10-12
Description: runpriv in SGI IRIX allows local users to bypass intended restrictions and execute arbitrary commands via shell metacharacters in a command line for a privileged binary in /usr/sysadm/privbin.
CVSS Score: 7.2 (HIGH)
References: ftp://patches.sgi.com/support/free/security/advisories/20051001-01-P.asc; http://secunia.com/advisories/17131; http://securitytracker.com/id?1015031
CVE: CVE-2005-2937
Published: 2005-10-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-3663, CVE-2005-3664.  Reason: this candidate was intended for one issue, but multiple advisories used this candidate for different issues.  Notes: All CVE users should consult CVE-2005-3663 and CVE-2005-3664 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-2965
Published: 2005-10-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: CVE-2005-4802, CVE-2005-4803.  Reason: this candidate was intended for one issue, but the description and references inadvertently combined multiple issues. Notes: All CVE users should consult CVE-2005-4802 and CVE-2005-4803 to determine which ID is appropriate.  All references and descriptions in this candidate have been removed to prevent accidental usage
CVE: CVE-2005-3180
Published: 2005-10-12
Description: The Orinoco driver (orinoco.c) in Linux kernel 2.6.13 and earlier does not properly clear memory from a previously used packet whose length is increased, which allows remote attackers to obtain sensitive information.
CVSS Score: 5.0 (MEDIUM)
References: http://marc.info/?l=bugtraq&m=[PII_REDACTED]8402&w=2; http://secunia.com/advisories/17114; http://secunia.com/advisories/17280
CVE: CVE-2005-3181
Published: 2005-10-12
Description: The audit system in Linux kernel 2.6.6, and other versions before 2.6.13.4, when CONFIG_AUDITSYSCALL is enabled, uses an incorrect function to free names_cache memory, which prevents the memory from being tracked by AUDITSYSCALL code and leads to a memory leak that allows attackers to cause a denial of service (memory consumption).
CVSS Score: 2.1 (LOW)
CWE: CWE-401
References: http://kernel.org/git/?p=linux/kernel/git/torvalds/linux-2.6.git%3Ba=commitdiff%3Bh=[PII_REDACTED]78e082613a49581ae252c071057c23; http://linux.bkbits.net:8080/linux-2.6/cset%404346883bQBeBd26syWTKX2CVC5bDcA; http://secunia.com/advisories/17114
CVE: CVE-2005-2715
Published: 2005-10-12
Description: Format string vulnerability in the Java user interface service (bpjava-msvc) daemon for VERITAS NetBackup Data and Business Center 4.5FP and 4.5MP, and NetBackup Enterprise/Server/Client 5.0, 5.1, and 6.0, allows remote attackers to execute arbitrary code via the COMMAND_LOGON_TO_MSERVER command.
CVSS Score: 10.0 (HIGH)
References: http://secunia.com/advisories/17181; http://securitytracker.com/id?1015028; http://seer.support.veritas.com/docs/279085.htm
CVE: CVE-2005-2942
Published: 2005-10-12
Description: Rejected reason: DO NOT USE THIS CANDIDATE NUMBER.  ConsultIDs: none.  Reason: This candidate has been revoked by its Candidate Numbering Authority (CNA) because it was initially assigned to a problem that was not a security issue.  Notes: none
CVE: CVE-2005-3183
Published: 2005-10-12
Description: The HTBoundary_put_block function in HTBound.c for W3C libwww (w3c-libwww) allows remote servers to cause a denial of service (segmentation fault) via a crafted multipart/byteranges MIME message that triggers an out-of-bounds read.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: ftp://ftp.sco.com/pub/updates/OpenServer/SCOSA-2006.10/SCOSA-2006.10.txt; http://secunia.com/advisories/17119; http://secunia.com/advisories/17122
CVE: CVE-2005-1985
Published: 2005-10-13
Description: The Client Service for NetWare (CSNW) on Microsoft Windows 2000 SP4, XP SP1 and Sp2, and Server 2003 SP1 and earlier, allows remote attackers to execute arbitrary code due to an "unchecked buffer" when processing certain crafted network messages.
CVSS Score: 7.5 (HIGH)
References: http://secunia.com/advisories/17165; http://securitytracker.com/id?1015041; http://www.osvdb.org/19922
CVE: CVE-2005-1987
Published: 2005-10-13
Description: Buffer overflow in Collaboration Data Objects (CDO), as used in Microsoft Windows and Microsoft Exchange Server, allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name, as demonstrated using the "Content-Type" string.
CVSS Score: 7.5 (HIGH)
CWE: CWE-120
References: http://archives.neohapsis.com/archives/fulldisclosure/2005-10/0289.html; http://marc.info/?l=bugtraq&m=[PII_REDACTED]2012&w=2; http://secunia.com/advisories/17167