CVE-2010-0024

EPSS 10.75%
Veröffentlicht 14.04.2010 16:00:00
Zuletzt bearbeitet 16.06.2026 23:15:15
Erkennungen
Login

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 6

NVD 16 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Windows 2000 Version - Update sp4

Microsoft ≫ Windows Xp Version - Update sp2

Microsoft ≫ Windows Xp Version - Update sp2 HwPlatform x64

Microsoft ≫ Windows Xp Version - Update sp3

Microsoft ≫ Windows 2003 Server Version - Update sp2 HwPlatform itanium

Microsoft ≫ Windows Server 2003 Version - Update sp2

Microsoft ≫ Windows Server 2008 Version - HwPlatform x64

Microsoft ≫ Windows Server 2008 Version - Update r2 HwPlatform x64

Microsoft ≫ Windows Server 2008 Version - Update sp2

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x64

Microsoft ≫ Windows Server 2008 Version - Update sp2 HwPlatform x86

Microsoft ≫ Exchange Server Version 2000 Update sp3

Microsoft ≫ Exchange Server Version 2003 Update sp2

Microsoft ≫ Exchange Server Version 2007 Update sp1 HwPlatform x64

Microsoft ≫ Exchange Server Version 2007 Update sp2 HwPlatform x64

Microsoft ≫ Exchange Server Version 2010 Update - HwPlatform x64

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.75%	0.953

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	5	10	2.9	AV:N/AC:L/Au:N/C:N/I:N/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.us-cert.gov/cas/techalerts/TA10-103A.html

Third Party Advisory

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024

Patch

Vendor Advisory

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7067

Third Party Advisory

https://nvd.nist.gov/vuln/detail/CVE-2010-0024

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2010-0024

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2010-0024

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2010-0024