CVE-2006-0027

Vulnerability

An unspecified vulnerability exists in Microsoft Exchange Server 2000 (with Exchange 2000 Post-Service Pack 3 Update Rollup of August 2004), Exchange Server 2003 Service Pack 1, and Exchange Server 2003 Service Pack 2. The flaw lies in how Microsoft Collaboration Data Objects (CDO) for Exchange processes iCal and vCal properties in email messages. By sending a specially crafted email with malicious calendar properties, an attacker can trigger memory corruption, leading to arbitrary code execution [1][2].

Exploitation

An unauthenticated remote attacker can exploit this by sending an email message with crafted vCal or iCal properties to a vulnerable Exchange Server. No user interaction is required; the message is processed by the server's CDO component upon receipt [2].

Impact

Successful exploitation allows a remote attacker to execute arbitrary code on the Exchange Server with SYSTEM privileges. The attacker can then install programs, view/change/delete data, or create new accounts with full user rights [1].

Mitigation

Microsoft released security bulletin MS06-019 on May 9, 2006, providing updates for the affected versions. Customers are advised to apply the update immediately. No other workarounds were documented [1].