Design/Logic Flaw

Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."...

CVE-2014-0294

Microsoft Forefront Protection 2010 for Exchange Server does not properly parse e-mail content, which might allow remote attackers to execute arbitrary code via a crafted message, aka "RCE Vulnerability."...

CVE-2014-0294

CVE-2014-0294 affects Microsoft Forefront Protection 2010 for Exchange Server. The issue is a remote code execution vulnerability caused by improper parsing of e-mail content, allowing an attacker to execute arbitrary code via a crafted message. The vulnerability is tied to the MS14-008 bulletin ...

Microsoft Forefront Protection for Exchange Server远程代码执行漏洞(CVE-2014-0294)(MS14-008)

BUGTRAQ ID: 65397 CVECAN ID: CVE-2014-0294 Microsoft Forefront Protection for Exchange Server能够快速且有效地抵御恶意软件和垃圾邮件。 Forefront Protection for Exchange存在远程代码执行漏洞，成功利用后可在配置了服务帐号的安全上下文中远程运行任意代码。 0 Microsoft Forefront Protection for Exchange Server 2010 厂商补丁： Microsoft ---------...

Microsoft Forefront Protection For Exchange RCE Vulnerability (2927022)

This host is missing a critical security update according to Microsoft Bulletin MS14-008. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Forefront Protection for Exchange Server CVE-2014-0294 Remote Code Execution Vulnerability

Description Microsoft Forefront Protection for Exchange Server is prone to a remote code-execution vulnerability. Successful exploits will allow attackers to execute arbitrary code in the context of the currently logged-in user. Failed exploit attempts will likely result in denial-of-service...

Microsoft Forefront Protection for Exchange Server Installed

Binary data microsoftforefrontforexchangeinstalled.nbin...

Microsoft Exchange Server multiple security vulnerabilities

Machine authentication check code execution, crossite scripting, Oracle components code execution...

CVE-2013-5072

Cross-site scripting XSS vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."...

Cross site scripting

Cross-site scripting XSS vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."...

CVE-2013-5072

The CVE-2013-5072 entry refers to a cross-site scripting (XSS) vulnerability in Outlook Web Access (OWA) of Microsoft Exchange Server 2010 SP2/SP3 and 2013 Cumulative Updates 2 and 3. The vulnerability arises from improper sanitization of input in OWA, permitting a crafted URL to inject arbitrary...

MS Exchange Server Remote Code Execution Vulnerabilities (2915705)

This host is missing a critical security update according to Microsoft Bulletin MS13-105. OpenVAS Vulnerability Test $Id: secpodms13-105.nasl 6079 2017-05-08 09:03:33Z teissa $ MS Exchange Server Remote Code Execution Vulnerabilities 2915705 Authors: Antu Sanadi Copyright: Copyright C 2013 SecPod...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2915705)

This host is missing a critical security update according to Microsoft Bulletin MS13-105. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2013-5072

Cross-site scripting XSS vulnerability in Outlook Web Access in Microsoft Exchange Server 2010 SP2 and SP3 and 2013 Cumulative Update 2 and 3 allows remote attackers to inject arbitrary web script or HTML via a crafted URL, aka "OWA XSS Vulnerability."...

MS13-105: Vulnerabilities in Microsoft Exchange Server could allow remote code execution: December 10, 2013

Resolves vulnerabilities in the WebReady Document Viewing and Data Loss Prevention features of Microsoft Exchange Server. These vulnerabilities could allow remote code execution in the security context of the LocalService account if an attacker sends an email message that contains a specially...

Microsoft Exchange Server CVE-2013-5072 Cross Site Scripting Vulnerability

Description Microsoft Exchange Server is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site...

Microsoft SharePoint CVE-2013-1330 Remote Code Execution Vulnerability

Description Microsoft SharePoint is prone to a remote code-execution vulnerability. An attacker can exploit this issue to execute arbitrary code within the context of the guest account on the SharePoint server. Failed exploit attempts will result in a denial-of-service condition. Technologies...

August 2013 Security Bulletin Webcast, Q&A, and Slide Deck

Today we’re publishing the August 2013 Security Bulletin Webcast Questions & Answers page. We fielded 13 questions on various topics during the webcast, with specific bulletin questions focusing primarily on Exchange Server MS13-061 and Windows Kernel MS13-063. There were 3 additional questions...

Faulty Microsoft Exchange Server 2013 Patch Pulled Back

Microsoft announced Wednesday afternoon that it has pulled MS13-061, one of the patches issued yesterday for vulnerabilities in Exchange Server 2013. Microsoft said the patch is causing issues with the content index for mailbox databases. Organizations would still be able to send and receive emai...

Microsoft Exchange Server Remote Code Execution Vulnerabilities (2876063)

This host is missing a critical security update according to Microsoft Bulletin MS13-061. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...