CVE-2010-3937

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service infinite loop and MSExchangeIS outage via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."...

Microsoft Exchange Server DoS

Endless loop on RPC request processing...

MS10-106: Vulnerability in Microsoft Exchange Server Could Allow Denial of Service (2407132)

The version of Microsoft Exchange 2007 running on the remote host has a denial of service vulnerability. The Exchange service does not process specially crafted RPC calls correctly, resulting in an infinite loop. A remote, authenticated attacker could exploit this by making a specially crafted RP...

Microsoft Exchange Server 2007 Infinite Loop Remote Denial of Service Vulnerability

Description Microsoft Exchange Server is prone to a remote denial-of-service vulnerability. A successful exploit will allow a remote attacker to cause the application to stop responding, denying service to legitimate users. The issue affects Microsoft Exchange Server 2007 Service Pack 2 for...

Heap overflow

Heap-based buffer overflow in Microsoft Outlook 2002 SP3, 2003 SP3, and 2007 SP2, when Online Mode for an Exchange Server is enabled, allows remote attackers to execute arbitrary code via a crafted e-mail message, aka "Heap Based Buffer Overflow in Outlook Vulnerability."...

Microsoft Outlook TNEF Remote Code Execution Vulnerability (2315011)

This host is missing a critical security update according to Microsoft Bulletin MS10-064. OpenVAS Vulnerability Test $Id: secpodms10-064.nasl 6538 2017-07-05 11:38:27Z cfischer $ Microsoft Outlook TNEF Remote Code Execution Vulnerability 2315011 Authors: Antu Sanadi Copyright: Copyright c 2010...

Microsoft Security Bulletin MS10-064 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution (2315011)

Microsoft Security Bulletin MS10-064 - Critical Vulnerability in Microsoft Outlook Could Allow Remote Code Execution 2315011 Published: September 14, 2010 Version: 1.0 General Information Executive Summary This security update resolves a privately reported vulnerability. The vulnerability could...

Microsoft plugs Eleven Vulnerabilities with Patch Tuesday Update

Microsoft issued nine security bulletins on Tuesday, fixing eleven vulnerabilities in products ranging from Windows, to Microsoft Office, to Internet Information Services. The patch release, part of the company’s monthly Patch Tuesday release included a fix for a previously undisclosed...

Microsoft Outlook Web Access Crafted POST Request Elevation of Privilege (CVE-2010-3213)

Outlook Web Access OWA is a webmail service of Microsoft Exchange Server 5.0 and later. The web interface of OWA resembles the interface in Microsoft Outlook. An elevation of privilege vulnerability was reported in Microsoft Outlook Web Access. The vulnerability is due to an error in Outlook Web...

Design/Logic Flaw

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

CVE-2010-3190

Untrusted search path vulnerability in the Microsoft Foundation Class MFC Library in Microsoft Visual Studio .NET 2003 SP1; Visual Studio 2005 SP1, 2008 SP1, and 2010; Visual C++ 2005 SP1, 2008 SP1, and 2010; and Exchange Server 2010 Service Pack 3, 2013, and 2013 allows local users to gain...

Outlook Web Access 2003 CSRF Vulnerability

Exploit for windows platform in category web applications ========================================== Outlook Web Access 2003 CSRF Vulnerability ========================================== Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/201...

Outlook Web Access 2003 - Cross-Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

Outlook Web Access 2003 Cross Site Request Forgery

Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability in Microsoft Office Outlook Web Access for Exchange...

Outlook Web Access 2003 - Cross-Site Request Forgery

Outlook Web Access 2003 - Cross-Site Request Forgery Exploit Title: Microsoft Office Outlook Web Access for Exchange Server 2003 XSRF Vulnerability Date: 07/20/2010 Author: anonymous Tested on: Microsoft Office Outlook Web Access for Exchange Server 2003 A cross-site request forgery vulnerability...

Microsoft Outlook Web Access for Exchange Server 2003 - Cross-Site Request Forgery

Microsoft Outlook Web Access for Exchange Server 2003 - Cross-Site Request Forgery source: https://www.securityfocus.com/bid/41843/info Microsoft Outlook Web Access for Exchange Server 2003 is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker t...

Microsoft Outlook Web Access for Exchange Server 2003 - Cross-Site Request Forgery

source: https://www.securityfocus.com/bid/41843/info Microsoft Outlook Web Access for Exchange Server 2003 is prone to a cross-site request-forgery vulnerability. Exploiting this issue may allow a remote attacker to perform certain actions in the context of an authorized user's session and gain...

CVE-2010-1689

The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and...

Code injection

The DNS implementation in smtpsvc.dll before 6.0.2600.5949 in Microsoft Windows 2000 SP4 and earlier, Windows XP SP3 and earlier, Windows Server 2003 SP2 and earlier, Windows Server 2008 SP2 and earlier, Windows Server 2008 R2, Exchange Server 2003 SP3 and earlier, Exchange Server 2007 SP2 and...