CVE:CVE-2004-0840
CNNVD:CNNVD-200411-026
多款Microsoft产品中的SMTP组件和Exchange Routing Engine组件存在输入验证错误漏洞。远程攻击者可借助恶意的DNS响应消息利用该漏洞执行任意代码。以下产品及版本受到影响：Microsoft Windows XP（64-bit）（SMTP），Windows Server 2003（SMTP），Windows Server 2003（64-bit）（SMTP），Exchange Server 2003（Exchange Routing Engine）。
solution:Upgrade microsoft exchange_server to a higher version than 2003,and avoid the version 2003; Upgrade microsoft windows_server_2003 to a higher version than -,r2,and avoid the version r2; Upgrade microsoft windows_xp to a higher version than *