10

CVE-2007-0213

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Exchange Server Version 2000 Update sp3
Microsoft ≫ Exchange Server Version 2003 Update sp1
Microsoft ≫ Exchange Server Version 2003 Update sp2
Microsoft ≫ Exchange Server Version 2007 Update -
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 66.16% 0.992
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 10 10 10
AV:N/AC:L/Au:N/C:C/I:C/A:C
CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/archive/1/468871/100/200/threaded
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA07-128A.html
Third Party Advisory
US Government Resource
http://secunia.com/advisories/25183
Third Party Advisory
http://www.securitytracker.com/id?1018015
Third Party Advisory
VDB Entry
http://www.vupen.com/english/advisories/2007/1711
Permissions Required
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026
Patch
Vendor Advisory
http://packetstormsecurity.com/files/153533/Microsoft-Exchange-2003-base64-MIME-Remote-Code-Execution.html
Third Party Advisory
VDB Entry
http://www.kb.cert.org/vuls/id/343145
Third Party Advisory
US Government Resource
http://www.osvdb.org/34391
Broken Link
http://www.securityfocus.com/bid/23809
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/33889
Third Party Advisory
VDB Entry
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1890
Third Party Advisory