Lucene search

MicrosoftCVE-2010-0816

HistoryMay 12, 2010 - 11:46 a.m.

CVE-2010-0816

2010-05-1211:46:51

CWE-189

microsoft

web.nvd.nist.gov

cve-2010-0816

microsoft outlook express

windows live mail

windows xp

windows vista

windows server

windows 7

integer overflow

remote code execution

pop3

imap

vulnerability

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.6

Confidence

Low

EPSS

0.953

Percentile

99.4%

JSON

Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka “Outlook Express and Windows Mail Integer Overflow Vulnerability.”

Affected configurations

Nvd

Node

microsoftoutlook_expressMatch5.5sp2

microsoftoutlook_expressMatch6.0sp1

AND

microsoftwindows_2000sp4

Node

microsoftoutlook_expressMatch6.0

microsoftwindows_live_mail

AND

microsoftwindows_xpsp2

microsoftwindows_xpsp3

Node

microsoftoutlook_expressMatch6.0

microsoftwindows_live_mail

AND

microsoftwindows_xpMatch-sp2x64

Node

microsoftoutlook_expressMatch6.0

AND

microsoftwindows_2003_serversp2

microsoftwindows_2003_serversp2itanium

microsoftwindows_server_2003sp2

Node

microsoftwindows_live_mail

microsoftwindows_mail

AND

microsoftwindows_server_2008itanium

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008Match-itanium

microsoftwindows_server_2008Match-x64

microsoftwindows_server_2008Match-golditanium

microsoftwindows_server_2008Match-sp2itanium

microsoftwindows_server_2008Match-sp2x64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_vistaMatch-sp1

microsoftwindows_vistaMatch-sp2

Node

microsoftwindows_live_mail

microsoftwindows_mail

AND

microsoftwindows_7Match-

microsoftwindows_server_2008Matchr2itanium

microsoftwindows_server_2008Matchr2x64

VendorProductVersionCPE
microsoftoutlook_express5.5cpe:2.3:a:microsoft:outlook_express:5.5:sp2:*:*:*:*:*:*
microsoftoutlook_express6.0cpe:2.3:a:microsoft:outlook_express:6.0:sp1:*:*:*:*:*:*
microsoftwindows_2000*cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
microsoftoutlook_express6.0cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*
microsoftwindows_live_mail*cpe:2.3:a:microsoft:windows_live_mail:*:*:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
microsoftwindows_xp*cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:*:*:*:*:*:*
microsoftwindows_2003_server*cpe:2.3:o:microsoft:windows_2003_server:*:sp2:itanium:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	outlook_express	5.5	cpe:2.3:a:microsoft:outlook_express:5.5:sp2::::::
microsoft	outlook_express	6.0	cpe:2.3:a:microsoft:outlook_express:6.0:sp1::::::
microsoft	windows_2000	*	cpe:2.3:o:microsoft:windows_2000::sp4::::::*
microsoft	outlook_express	6.0	cpe:2.3:a:microsoft:outlook_express:6.0:::::::*
microsoft	windows_live_mail	*	cpe:2.3:a:microsoft:windows_live_mail::::::::
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp2::::::*
microsoft	windows_xp	*	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
microsoft	windows_xp	-	cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
microsoft	windows_2003_server	*	cpe:2.3:o:microsoft:windows_2003_server::sp2:itanium:::::