Unrated severityNVD Advisory· Published Feb 10, 2009· Updated Jun 16, 2026

CVE-2009-0098

Description

Microsoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not properly interpret Transport Neutral Encapsulation (TNEF) properties, which allows remote attackers to execute arbitrary code via a crafted TNEF message, aka "Memory Corruption Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Microsoft/Exchange Server4 versions
cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:*:*
- (no CPE)range: SP3

Patches

Vulnerability mechanics

References

www.us-cert.gov/cas/techalerts/TA09-041A.htmlnvdUS Government Resource
osvdb.org/51837nvd
secunia.com/advisories/33838nvd
docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-003nvd
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6114nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.020
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000