VYPR
← All advisories
Unrated severityNVD Advisory· Published Apr 14, 2010· Updated Jun 16, 2026

CVE-2010-0025

CVE-2010-0025

Description

The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

18
  • Microsoft/Exchange Server6 versions
    cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:exchange_server:2007:sp2:*:*:*:*:x64:*
    • cpe:2.3:a:microsoft:exchange_server:2010:-:*:*:*:*:x64:*
    • (no CPE)range: = 2000 SP3
  • Microsoft/Windows 2000
    cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
  • Microsoft/Windows Server 20032 versions
    cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:itanium:*+ 1 more
    • cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:itanium:*
    • cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
  • Microsoft/Windows Server 20085 versions
    cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*+ 4 more
    • cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
  • Microsoft/Windows Xp3 versions
    cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
    • cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
    • cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
  • Microsoft/Windowsllm-fuzzy
    Range: 2000 SP4, XP SP2/SP3, Server 2003 SP2, Server 2008 Gold/SP2/R2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.