CVE-2009-0099: Input Validation

Published Feb 10, 2009
·
Updated

The Electronic Messaging System Microsoft Data Base (EMSMDB32) provider in Microsoft Exchange 2000 Server SP3 and Exchange Server 2003 SP2, as used in Exchange System Attendant, allows remote attackers to cause a denial of service (application outage) via a malformed MAPI command, aka "Literal Processing Vulnerability."

Affected Software

3 affected components
Microsoft Exchange Server=2000-sp3
Microsoft Exchange Server=2003-sp2
Microsoft Exchange Server=2007-sp1

Event History

Feb 10, 2009
CVE Published
via MITRE·10:13 PM
Data Sourced
via MITRE·10:13 PM
Description
Data Sourced
via NVD·10:30 PM
DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

1

What is the severity of CVE-2009-0099?

CVE-2009-0099 is categorized as a denial of service vulnerability affecting Microsoft Exchange Server.

2

How do I fix CVE-2009-0099?

To mitigate CVE-2009-0099, apply the latest security updates provided by Microsoft for Exchange Server 2000 SP3 and 2003 SP2.

3

What software versions are affected by CVE-2009-0099?

CVE-2009-0099 affects Microsoft Exchange Server 2000 SP3 and 2003 SP2.

4

What type of attack is associated with CVE-2009-0099?

CVE-2009-0099 involves a remote denial of service attack via a malformed MAPI command.

5

Can CVE-2009-0099 be exploited remotely?

Yes, CVE-2009-0099 can be exploited remotely by attackers to cause an application outage.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203