CVE-2004-0840

published 2004-11-03

CVE-2004-0840: The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the…

critical 10 CVSS 3.1

AV N AC L Au N C C I C A C

The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
microsoft	exchange_server	—	—
microsoft	windows_server_2003	—	—

CWE-20