CVE:CVE-2006-0002
CNNVD:CNNVD-200601-092
Microsoft Outlook和Exchange都是微软发布的邮件处理软件。
Microsoft Outlook和Microsoft Exchange Server解码传输中立封装格式(TNEF)MIME附件的方式存在漏洞，攻击者可能利用此漏洞在机器上执行任意指令。攻击者可以创建特制的TNEF消息，如果用户打开或浏览了恶意的邮件消息或Microsoft Exchange Server Information Store处理了该特制消息的话，就可能执行任意代码。
solution:Upgrade microsoft exchange_server to a higher version than 5.0,5.0:sp1,5.0:sp2,5.5,5.5:sp1,5.5:sp2,5.5:sp3,5.5:sp4,2000:sp3,and avoid the version 5.0,5.0:sp1,5.0:sp2,5.5,5.5:sp1,5.5:sp2,5.5:sp3,5.5:sp4,2000:sp3; Upgrade microsoft office to a higher version than 2000:sp3,2003:sp1,2003:sp2,xp:sp3,and avoid the version 2000:sp3,2003:sp1,2003:sp2,xp:sp3; Upgrade microsoft outlook to a higher version than 2000:sp3,2002:sp3,2003,and avoid the version 2000:sp3,2002:sp3,2003