CVEvulnerability
CVE-2009-0099
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-02-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."
Affected configurations
• microsoft exchange server 2000
• microsoft exchange server 2003
• microsoft exchange server 2007
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://osvdb.org/51838 osvdb.org
- http://secunia.com/advisories/33838 secunia.com
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159 oval.cisecurity.org
- http://osvdb.org/51838 osvdb.org
- http://secunia.com/advisories/33838 secunia.com
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6159 oval.cisecurity.org