CVE-2010-0024

Microsoft Windows and Exchange Server - Denial of Service via SMTP MX Record Parsing

Title source: llm
STIX 2.1

Description

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2003 SP2, does not properly parse MX records, which allows remote DNS servers to cause a denial of service (service outage) via a crafted response to a DNS MX record query, aka "SMTP Server MX Record Vulnerability."

References (3)

Core 3
Core References
Patch, Vendor Advisory vendor-advisory x_refsource_ms
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert
http://www.us-cert.gov/cas/techalerts/TA10-103A.html

Scores

EPSS 0.1075
EPSS Percentile 95.3%

Details

CWE
CWE-20
Status published
Products (9)
microsoft/exchange_server 2000 sp3
microsoft/exchange_server 2003 sp2
microsoft/exchange_server 2007 sp1 (2 CPE variants)
microsoft/exchange_server 2010
microsoft/windows_2000
microsoft/windows_2003_server
microsoft/windows_server_2003
microsoft/windows_server_2008 (5 CPE variants)
microsoft/windows_xp (3 CPE variants)
Published Apr 14, 2010
Tracked Since Feb 18, 2026