SMTP Server Vulnerability in Microsoft Exchange and Windows Server Products
CVE-2010-0024

Currently unrated

Key Information:

Vendor

Microsoft
Status
Windows 2000
Vendor
CVE Published:
14 April 2010

What is CVE-2010-0024?

The SMTP component in various Microsoft Windows and Exchange Server products improperly parses MX records, which can permit remote DNS servers to trigger a denial of service. This vulnerability occurs during DNS MX record query processing, where maliciously crafted responses can lead to service outages, impacting the availability of email services and possibly other dependent applications.

References

https://oval.cisecurity.org/repository/search/definition/...
vdb-entrysignaturex_refsource_OVAL
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS
http://www.us-cert.gov/cas/techalerts/TA10-103A.html
third-party-advisoryx_refsource_CERT

EPSS Score

40% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2010-0024 : SMTP Server Vulnerability in Microsoft Exchange and Windows Server Products