CVE-2007-0213

Published: May 8, 2007Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 does not properly decode certain MIME encoded e-mails, which allows remote attackers to execute arbitrary code via a crafted base64-encoded MIME e-mail message.

Affected (4)

Products: Microsoft: Exchange Server

1 product

Exchange Server

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Exchange Server	Version 2000 sp3
Microsoft Exchange Server	Version 2003 sp1
Microsoft Exchange Server	Version 2003 sp2
Microsoft Exchange Server	Version 2007

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (24)

http://packetstormsecurity.com/files/153533/Microsoft-Exchange-2003-base64-MIME-Remote-Code-Execution.html

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/25183

Source: secure@microsoft.com

Third Party Advisory

http://www.kb.cert.org/vuls/id/343145

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/34391

Source: secure@microsoft.com

Broken Link

http://www.securityfocus.com/archive/1/468871/100/200/threaded

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/23809

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018015

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA07-128A.html

Source: secure@microsoft.com

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2007/1711

Source: secure@microsoft.com

Permissions Required

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026

Source: secure@microsoft.com

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33889

Source: secure@microsoft.com

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1890

Source: secure@microsoft.com

Third Party Advisory

http://packetstormsecurity.com/files/153533/Microsoft-Exchange-2003-base64-MIME-Remote-Code-Execution.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://secunia.com/advisories/25183

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

http://www.kb.cert.org/vuls/id/343145

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.osvdb.org/34391

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://www.securityfocus.com/archive/1/468871/100/200/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securityfocus.com/bid/23809

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id?1018015

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

http://www.us-cert.gov/cas/techalerts/TA07-128A.html

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryUS Government Resource

http://www.vupen.com/english/advisories/2007/1711

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions Required

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2007/ms07-026

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/33889

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1890

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.