CVE-2010-2728

CVE-2010-2728 describes a heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2 when operating in Online Mode with an Exchange Server. This critical vulnerability, with a CVSS score of 9.3, allows remote attackers to execute arbitrary code simply by sending a crafted email message, requiring no authentication and moderate attack complexity. Despite its high severity and potential for complete compromise of confidentiality, integrity, and availability, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.