CVE-2006-0002: Microsoft Exchange Server

High severity, CVSS 7.5. EPSS: 45.6% chance of exploitation in the next 30 days.

Unspecified vulnerability in Microsoft Outlook 2000 through 2003, Exchange 5.0 Server SP2 and 5.5 SP4, Exchange 2000 SP3, and Office allows remote attackers to execute arbitrary code via an e-mail message with a crafted Transport Neutral Encapsulation Format (TNEF) MIME attachment, related to message length validation.

Affected products

• Microsoft Exchange Server: version 5.0 only; version 5.5 only; version 2000 only
• Microsoft Office: version 2000 only; version 2003 only; version xp only
• Microsoft Outlook: version 2000 only; version 2002 only; version 2003 only

Published 2006-01-10. Last modified 2026-06-16.