Back to search
CVE-2007-0039
Published: May 8, 2007
Modified: Aug 7, 2024
PUBLISHED
Description
The Exchange Collaboration Data Objects (EXCDO) functionality in Microsoft Exchange Server 2000 SP3, 2003 SP1 and SP2, and 2007 allows remote attackers to cause a denial of service (crash) via an Internet Calendar (iCal) file containing multiple X-MICROSOFT-CDO-MODPROPS (MODPROPS) properties in which the second MODPROPS is longer than the first, which triggers a NULL pointer dereference and an unhandled exception.
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
20070508 Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)
mailing-list
x_refsource_BUGTRAQ
HPSBST02214
vendor-advisory
x_refsource_HP
1018015
vdb-entry
x_refsource_SECTRACK
MS07-026
vendor-advisory
x_refsource_MS
34390
vdb-entry
x_refsource_OSVDB
SSRT071422
vendor-advisory
x_refsource_HP
oval:org.mitre.oval:def:1593
vdb-entry
signature
x_refsource_OVAL
25183
third-party-advisory
x_refsource_SECUNIA
TA07-128A
third-party-advisory
x_refsource_CERT
exchange-ical-dos(33888)
vdb-entry
x_refsource_XF
ADV-2007-1711
vdb-entry
x_refsource_VUPEN
23808
vdb-entry
x_refsource_BID
20070509 Exchange Calendar MODPROPS Denial of Service (CVE-2007-0039)
mailing-list
x_refsource_FULLDISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now