Lucene search

K
cve[email protected]CVE-2010-2728
HistorySep 15, 2010 - 7:00 p.m.

CVE-2010-2728

2010-09-1519:00:19
CWE-119
web.nvd.nist.gov
23
microsoft outlook
cve-2010-2728
buffer overflow
remote code execution
email security
outlook vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.248 Low

EPSS

Percentile

96.7%

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka “Heap Based Buffer Overflow in Outlook Vulnerability.”

Affected configurations

NVD
Node
microsoftoutlookMatch2002sp3
OR
microsoftoutlookMatch2003sp3
OR
microsoftoutlookMatch2007sp2

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

8 High

AI Score

Confidence

Low

0.248 Low

EPSS

Percentile

96.7%