CVE:CVE-2010-0025
CNNVD:CNNVD-201004-241
Microsoft Windows是美国微软（Microsoft）公司发布的一系列操作系统。
Windows的SMTP组件处理内存分配的方式存在信息泄露漏洞。通过向受影响的服务器依次发送一些无效命令和STARTTLS命令，攻击者可以利用该漏洞阅读受影响的服务器上存储的随机电子邮件消息片段。
solution:Upgrade microsoft windows_2000 to a higher version than -:sp4,and avoid the version -:sp4; Upgrade microsoft windows_xp to a higher version than -:sp2,-:sp3,and avoid the version -:sp2,-:sp3; Upgrade microsoft windows_2003_server to a higher version than -:sp2,and avoid the version -:sp2; Upgrade microsoft windows_server_2003 to a higher version than -:sp2,and avoid the version -:sp2; Upgrade microsoft windows_server_2008 to a higher version than -,-:r2,-:sp2,and avoid the version -:r2,-:sp2; Upgrade microsoft exchange_server to a higher version than 2000:sp3,2003:sp2,2007:sp1,2007:sp2,2010,and avoid the version 2000:sp3,2003:sp2,2007:sp1,2007:sp2,2010