CVE-2006-1305: Microsoft Office

Medium severity, CVSS 4.3. EPSS: 32.4% chance of exploitation in the next 30 days.

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.

Affected products

• Microsoft Office: version 2000 only; version xp only; version 2003 only
• Microsoft Outlook: version 2000 only; version 2002 only; version 2003 only

Published 2006-12-31. Last modified 2026-06-16.