MS06-003 TNEF Encoding Vulnerability Patched
Included in the January 2006 patches released on January 10, 2006, is a critical patch to fix a TNEF decoding vulnerability.
TNEF is short for Transport Neutral Encapsulation Format, a proprietary format used by the Microsoft Exchange and Outlook e-mail clients when sending messages formatted as Rich Text Format (RTF).
The affected Exchange systems, for which patches are available, are:
- Microsoft Exchange Server 5.0 Service Pack 2
- Microsoft Exchange Server 5.5 Service Pack 4
- Microsoft Exchange Server 2000 Service Pack 3
For more information go here:
http://www.microsoft.com/technet/security/Bulletin/MS06-003.mspx
