Lucene search

K
nvd[email protected]NVD:CVE-2012-4791
HistoryDec 12, 2012 - 12:55 a.m.

CVE-2012-4791

2012-12-1200:55:01
CWE-94
web.nvd.nist.gov
6

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.069

Percentile

94.0%

Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka “RSS Feed May Cause Exchange DoS Vulnerability.”

Affected configurations

Nvd
Node
microsoftexchange_serverMatch2007sp3
OR
microsoftexchange_serverMatch2010sp1
OR
microsoftexchange_serverMatch2010sp2
VendorProductVersionCPE
microsoftexchange_server2007cpe:2.3:a:microsoft:exchange_server:2007:sp3:*:*:*:*:*:*
microsoftexchange_server2010cpe:2.3:a:microsoft:exchange_server:2010:sp1:*:*:*:*:*:*
microsoftexchange_server2010cpe:2.3:a:microsoft:exchange_server:2010:sp2:*:*:*:*:*:*

CVSS2

3.5

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:S/C:N/I:N/A:P

AI Score

6.1

Confidence

High

EPSS

0.069

Percentile

94.0%