CVE-2004-0840 The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchang...
HighCVSS 10.0
EPSS 30.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft exchange server | = 2003 | No fix listed |
| Microsoft windows server 2003 | All versions | No fix listed |
| Microsoft windows server 2003 | = r2 | No fix listed |
| Microsoft windows xp | All versions | No fix listed |
References
- VU#394792 patch third-party-advisory us-government-resource
- 11374 third-party-advisory vdb-entry
- MS04-035 patch vendor-advisory
- win2k3-smtp-execute-code(17621) third-party-advisory vdb-entry
- win-ms04035-patch(17660) third-party-advisory vdb-entry
- oval:org.mitre.oval:def:2300 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:3460 signature third-party-advisory vdb-entry
- oval:org.mitre.oval:def:5509 signature third-party-advisory vdb-entry