CVE-2009-0099 — Improper Input Validation in Microsoft Exchange Server

CWE-20 — Improper Input Validation4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
71.1%
top 1.29%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Microsoft Exchange Server
Timeline
PublishedFeb 10
Latest updateMay 2

Description

The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/exchange_server2000, 2003, 2007+2

🔴Vulnerability Details

3
GHSA
GHSA-w8h6-6x8h-3fj6: The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in↗2022-05-02
▶
CVEList
CVE-2009-0099: The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in↗2009-02-10
▶
VulnCheck
Microsoft Exchange Server Improper Input Validation↗2009
▶
CVE-2009-0099 — Improper Input Validation in Microsoft | cvebase