CVE-2006-1305

no score yetEPSS 32%

Microsoft Outlook 2000, 2002, and 2003 allows user-assisted remote attackers to cause a denial of service (memory exhaustion and interrupted mail recovery) via malformed e-mail header information, possibly related to (1) long subject lines or (2) large numbers of recipients in To or CC headers.

EPSS: 32% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-399
Published: 2006-12-31
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:office
microsoft:outlook

References

http://blogs.securiteam.com/index.php/archives/347
http://linuxbox.org/pipermail/funsec/2006-March/005208.html
http://osvdb.org/ref/24/24081-outlook1.txt
http://secunia.com/advisories/23674
http://securitytracker.com/id?1017488

Check your stack JSON