MS06-003: Vulnerability in TNEF Decoding in Microsoft Outlook and Microsoft Exchange Could Allow Remote Code Execution (902412)

High Nessus Plugin ID 20390


Arbitrary code can be executed on the remote host through the email client or server.


The remote host is running a version of Outlook or Exchange containing a bug in the Transport Neutral Encapsulation Format (TNEF) MIME attachment handling routine that could allow an attacker execute arbitrary code on the remote host by sending a specially crafted email.


Microsoft has released a set of patches for Office 2000, 2002, XP, 2003, Exchange 5.0, 5.5 and 2000.

See Also

Plugin Details

Severity: High

ID: 20390

File Name: smb_nt_ms06-003.nasl

Version: $Revision: 1.32 $

Type: local

Agent: windows

Published: 2006/01/10

Modified: 2017/08/10

Dependencies: 57033, 13855

Risk Information

Risk Factor: High


Base Score: 7.5

Temporal Score: 5.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

Vulnerability Information

CPE: cpe:/a:microsoft:office, cpe:/a:microsoft:exchange_server

Required KB Items: SMB/MS_Bulletin_Checks/Possible

Exploit Available: false

Exploit Ease: No known exploits are available

Patch Publication Date: 2006/01/10

Vulnerability Publication Date: 2006/01/10

Reference Information

CVE: CVE-2006-0002

BID: 16197

OSVDB: 22305

CERT: 252146

MSFT: MS06-003

MSKB: 892841, 892842, 892843, 894689, 902412