Buffer overflow in Collaboration Data Objects (CDO) as used in Microsoft Windows and Microsoft Exchange Server allows remote attackers to execute arbitrary code when CDOSYS or CDOEX processes an e-mail message with a large header name as demonstrated using the \Content-Type\ string.