Description
The SMTP (Simple Mail Transfer Protocol) component of Microsoft Windows XP 64-bit Edition, Windows Server 2003, Windows Server 2003 64-bit Edition, and the Exchange Routing Engine component of Exchange Server 2003, allows remote attackers to execute arbitrary code via a malicious DNS response message containing length values that are not properly validated.
References
- oval:org.mitre.oval:def:2300 vdb-entry signature
- oval:org.mitre.oval:def:5509 vdb-entry signature
- 11374 vdb-entry
- MS04-035 vendor-advisory
- win-ms04035-patch(17660) vdb-entry
- win2k3-smtp-execute-code(17621) vdb-entry
- oval:org.mitre.oval:def:3460 vdb-entry signature
- VU#394792 third-party-advisory