Overview
- Description
- The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-20
Social media
- Hype score
- Not currently trending
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:microsoft:exchange_server:2003:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E2337C2B-EEC2-48B3-93C0-FE1FE7D41273"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "E3C43D05-40F8-4769-BA6B-A376420EA972"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_server_2003:r2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "23C65B29-89C4-4C05-BD53-27CAD31810A1"
},
{
"criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:x64:*",
"vulnerable": true,
"matchCriteriaId": "70C62E91-94D3-4534-985C-8236D71CC10D"
}
],
"operator": "OR"
}
]
}
]