exploits , vulnerabilities , articles , Microsoft Exchange Server TNEF Decoding Remote Code Execution Vulnerability

Title	Microsoft Exchange Server TNEF Decoding Remote Code Execution Vulnerability
Published	2009-02-10-12:00AM
Updated	2009-02-17-01:08AM
Class	Failure to Handle Exceptional Conditions
CVE	CVE-2009-0098
Remote	Yes
Local	No
Credit	This issue was disclosed by the vendor.
Vulnerable	Microsoft Exchange Server MAPI Client 1.2.1 Microsoft Exchange Server 2007 SP 1 Microsoft Exchange Server 2007 0 Microsoft Exchange Server 2003 SP2 Microsoft Exchange Server 2003 SP1 Microsoft Exchange Server 2003 Microsoft Exchange Server 2000 SP3 Microsoft Exchange Server 2000 SP2 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Exchange Server 2000 SP1 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Microsoft Exchange Server 2000 Microsoft Windows 2000 Advanced Server SP2 Microsoft Windows 2000 Advanced Server SP1 Microsoft Windows 2000 Advanced Server Microsoft Windows 2000 Datacenter Server SP2 Microsoft Windows 2000 Datacenter Server SP1 Microsoft Windows 2000 Datacenter Server Microsoft Windows 2000 Server SP2 Microsoft Windows 2000 Server SP1 Microsoft Windows 2000 Server Avaya Messaging Application Server MM 3.1 Avaya Messaging Application Server MM 3.0 Avaya Messaging Application Server MM 2.0 Avaya Messaging Application Server MM 1.1 Avaya Messaging Application Server 0
Not Vulnerable
Code	Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: content@securitydot.net.
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-08 LightNEasy fckeditor Arbitrary File Upload Vulnerability
2009-12-08 HP OpenView Data Protector Application Recovery Manager Stack Buffer Overflow Vulnerability
2009-12-08 RETIRED: Microsoft December 2009 Advance Notification Multiple Vulnerabilities
2009-12-08 Computer Associates Service Desk Cross-Site Scripting Vulnerability
2009-12-08 Microsoft Internet Explorer (CVE-2009-3671) Uninitialized Memory Remote Code Execution Vulnerability
2009-12-08 Microsoft Internet Explorer CSS Race Condition Remote Code Execution Vulnerability
2009-12-08 IBM InfoSphere Information Server Multiple Unspecified Buffer Overflow Vulnerabilities
2009-12-08 Novell iPrint Client Remote Buffer Overflow Vulnerabilities
2009-12-07 FFmpeg TCP/UDP Memory Leak Denial Of ServiceVulnerability
2009-12-04 Achievo Document Types Section Arbitrary File Upload Vulnerability