Unrated severityNVD Advisory· Published Apr 14, 2010· Updated Apr 29, 2026
CVE-2010-0025
CVE-2010-0025
Description
The SMTP component in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, and Server 2008 Gold, SP2, and R2, and Exchange Server 2000 SP3, does not properly allocate memory for SMTP command replies, which allows remote attackers to read fragments of e-mail messages by sending a series of invalid commands and then sending a STARTTLS command, aka "SMTP Memory Allocation Vulnerability."
Affected products
16cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*+ 4 more
- cpe:2.3:a:microsoft:exchange_server:2000:sp3:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2003:sp2:*:*:*:*:*:*
- cpe:2.3:a:microsoft:exchange_server:2007:sp1:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:exchange_server:2007:sp2:*:*:*:*:x64:*
- cpe:2.3:a:microsoft:exchange_server:2010:-:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:itanium:*+ 1 more
- cpe:2.3:o:microsoft:windows_2003_server:-:sp2:*:*:*:*:itanium:*
- cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*+ 4 more
- cpe:2.3:o:microsoft:windows_server_2008:-:r2:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_server_2008:-:sp2:*:*:*:*:x86:*
- cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:x64:*
cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:*
- cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:x64:*
- cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-024nvdPatchVendor Advisory
- secunia.com/advisories/39253nvdThird Party Advisory
- www.us-cert.gov/cas/techalerts/TA10-103A.htmlnvdThird Party AdvisoryUS Government Resource
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12175nvdThird Party Advisory
News mentions
0No linked articles in our index yet.