3822 matches found
Microsoft Exchange Server Remote Privilege Elevation Vulnerability
Microsoft Exchange Server is a mail service program developed by Microsoft. An unspecified security vulnerability exists in Microsoft Exchange Outlook Web Access OWA when it fails to properly process Web requests, which could be exploited by an attacker to submit a special request for elevated...
Microsoft Exchange Server Remote Privilege Escalation Vulnerability (4013242)
This host is missing an important security update according to Microsoft Bulletin MS17-015. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...
Microsoft Exchange Server Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when Microsoft Exchange Outlook Web Access OWA fails to properly handle web requests. An attacker who successfully exploited this vulnerability could perform script/content injection attacks and attempt to trick the user into disclosing sensitive...
MS17-014: Description of the security update for Word 2016: March 14, 2017
None None...
MS17-015: Description of the security update for Exchange Server 2016 and Exchange Server 2013: March 14, 2017
None None...
KLA10982 PE vulnerability in Microsoft Server Software
An improper handling of web requests was found in Microsoft Outlook Web Access. By exploiting this vulnerability malicious users can gain privileges. A successful exploit allows attackers to perform content/script injection attacks, make user disclose sensitive information. This vulnerability can...
MS17-015: Security Update for Microsoft Exchange Server: March 14, 2017
Resolves a vulnerability in the Microsoft Exchange Outlook Web Access OWA.SummaryThis update resolves a vulnerability in the Microsoft Exchange Outlook Web Access OWA. The vulnerability could allow remote code execution in Exchange Server if an attacker sends an email that includes a specially...
Microsoft Dynamics CRM 2011 Update Rollup 15
Microsoft Dynamics CRM 2011 Update Rollup 15 We have identified a compatibility issue that occurs when you use the Microsoft Dynamics CRM 2011 Client for Outlook with Update Rollup 15 applied against a Dynamics CRM 2013 server. This issue does not affect Dynamics CRM 2011 servers. A new Update...
Description of the Microsoft Office for Mac 2011 14.2.5
Describes the Microsoft Office for Mac 2011 14.2.5 security update that was released on November 13, 2011.INTRODUCTIONMicrosoft has released security bulletin MS12-076. This security bulletin contains all the relevant information about the security update for Microsoft Office for Mac 2011. To vie...
MS13-068: Description of the security update for Outlook 2010: September 10, 2013
MS13-068: Description of the security update for Outlook 2010: September 10, 2013 Introduction This update resolves a security vulnerability that could allow remote code execution if a user opens or previews a specially crafted email message. Summary Microsoft has released security bulletin...
Office 365 Vulnerability Identified Bogus Email as Valid
Details have been released on a simple Office 365 hack that incorrectly identifies spoofed emails pretending to be from the Microsoft.com domain as valid. The vulnerability being targeted was privately disclosed by Turkish security researcher Utku Sen, and was patched by Microsoft this month...
Free Open Source Scalable Incident Response Platform: The Hive
Free Open Source Scalable Incident Response Platform TheHive is a scalable 3-in-1 open source and free solution designed to make life easier for SOCs, CSIRTs, CERTs and any information security practitioner dealing with security incidents that need to be investigated and acted upon swiftly. TheHi...
OWA and Offic365 two-factor authentication bypass-vulnerability warning-the black bar safety net
Foreword Full disclosure: the BLACK HILLS information security very much in favor of responsible disclosure of vulnerabilities. 2 0 1 6 9 2 8, I to Microsoft reported this vulnerability, may have been to this article publishing 2016.11.2, Microsoft for this vulnerability is always without any...
The vulnerability of Microsoft Exchange Server servers allows attackers to gain access to protected information from the Outlook application.
The vulnerability of Microsoft Exchange Server servers is related to improper analysis of email messages. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to protected information in the Outlook application by using the “Send As” command...
The vulnerability of the Microsoft Outlook email client, which allows a hacker to bypass virus or spam detection systems
The vulnerability of the Microsoft Outlook email client is related to the improper implementation of the requirements specified in RFC 2046. Exploiting this vulnerability allows a malicious actor to bypass virus or spam detection systems by using specially crafted MIME data in email attachments...
CVE-2016-3366
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...
CVE-2016-3366
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...
CVE-2016-0138
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
Information disclosure
Microsoft Exchange Server 2007 SP3, 2010 SP3, 2013 SP1, 2013 Cumulative Update 12, 2013 Cumulative Update 13, 2016 Cumulative Update 1, and 2016 Cumulative Update 2 misparses e-mail messages, which allows remote authenticated users to obtain sensitive Outlook application information by leveraging...
Spoofing
Microsoft Outlook 2007 SP3, Outlook 2010 SP2, Outlook 2013 SP1, Outlook 2013 RT SP1, Outlook 2016, and Outlook 2016 for Mac do not properly implement RFC 2046, which allows remote attackers to bypass virus or spam detection via crafted MIME data in an e-mail attachment, aka "Microsoft Office...