CVE-2010-0816
Last modified
CVE-2010-0816 is a vulnerability of currently unknown severity. Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability.". EPSS estimates a 20.32% chance of exploitation in the next 30 days.
Description
Integer overflow in inetcomm.dll in Microsoft Outlook Express 5.5 SP2, 6, and 6 SP1; Windows Live Mail on Windows XP SP2 and SP3, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7; and Windows Mail on Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, and R2, and Windows 7 allows remote e-mail servers and man-in-the-middle attackers to execute arbitrary code via a crafted (1) POP3 or (2) IMAP response, as demonstrated by a certain +OK response on TCP port 110, aka "Outlook Express and Windows Mail Integer Overflow Vulnerability."
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions | Update |
|---|---|---|---|
| Microsoft | Outlook Express | 5.5 | Sp2 |
| Microsoft | Outlook Express | 6.0 | Sp1 |
| Microsoft | Windows Live Mail | All versions | — |
| Microsoft | Windows Mail | All versions | — |
References
- http://www.us-cert.gov/cas/techalerts/TA10-131A.htmlUS Government Resource
- http://www.us-cert.gov/cas/techalerts/TA10-131A.htmlUS Government Resource
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2010-0816?
How severe is CVE-2010-0816?
How do I fix CVE-2010-0816?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2010
- CVE-2010-0810The kernel in Microsoft Windows Vista Gold, SP1, and SP2, an…
- CVE-2010-0811Multiple unspecified vulnerabilities in the Microsoft Intern…
- CVE-2010-0812Microsoft Windows XP SP2 and SP3, Server 2003 SP2, Vista Gol…
- CVE-2010-0813Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2010-0814The Microsoft Access Wizard Controls in ACCWIZ.dll in Micros…
- CVE-2010-0815VBE6.DLL in Microsoft Office XP SP3, Office 2003 SP3, 2007 M…
- CVE-2010-0817Cross-site scripting (XSS) vulnerability in _layouts/help.as…
- CVE-2010-0818The MPEG-4 codec in the Windows Media codecs in Microsoft Wi…
- CVE-2010-0819Unspecified vulnerability in the Windows OpenType Compact Fo…
- CVE-2010-0820Heap-based buffer overflow in the Local Security Authority S…8.8
- CVE-2010-0821Unspecified vulnerability in Microsoft Office Excel 2002 SP3…
- CVE-2010-0822Stack-based buffer overflow in Microsoft Office Excel 2002 S…
Are you affected by CVE-2010-0816?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
