CVE-2009-0098

Published: Feb 10, 2009Modified: Apr 23, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."

Affected (3)

Products: Microsoft: Exchange Server

1 product

Exchange Server

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Microsoft Exchange Server	Version 2000 sp3
Microsoft Exchange Server	Version 2003 sp2
Microsoft Exchange Server	Version 2007 sp1

Related CWEs

References (10)

http://osvdb.org/51837

Source: secure@microsoft.com

http://secunia.com/advisories/33838

Source: secure@microsoft.com

http://www.us-cert.gov/cas/techalerts/TA09-041A.html

Source: secure@microsoft.com

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003

Source: secure@microsoft.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114

Source: secure@microsoft.com

http://osvdb.org/51837

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/33838

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.us-cert.gov/cas/techalerts/TA09-041A.html

Source: af854a3a-2127-422b-91ae-364da2661108

US Government Resource

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.