CVE-2009-0099

EPSS 26.24%
Veröffentlicht 10.02.2009 22:30:00
Zuletzt bearbeitet 16.06.2026 23:04:15
Erkennungen
Login

The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 8

NVD 3 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Exchange Server Version 2000 Update sp3

Microsoft ≫ Exchange Server Version 2003 Update sp2

Microsoft ≫ Exchange Server Version 2007 Update sp1

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	26.24%	0.977

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.us-cert.gov/cas/techalerts/TA09-041A.html

US Government Resource

http://secunia.com/advisories/33838

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003

http://osvdb.org/51838

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159

https://nvd.nist.gov/vuln/detail/CVE-2009-0099

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-0099

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-0099

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-0099