Microsoft Exchange Server WebReady Document Viewing Remote Code Execution Vulnerabilities (2740358)

This host is missing a critical security update according to Microsoft Bulletin MS12-058. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS12-058: Vulnerability in Microsoft Exchange Server WebReady document viewing could allow remote code execution: August 14, 2012

Resolves a vulnerability in Microsoft Exchange Server WebReady Document Viewing that could allow remote code execution in the security context of the transcoding service on the Exchange server if a user previews a specially crafted file by using Outlook Web App OWA.INTRODUCTIONMicrosoft has...

Microsoft Publishes Workaround for Oracle Outside In Vulnerability

Microsoft gave its users steps earlier this week to sidestep a vulnerability in one of Oracle’s Outside In libraries. The company published some mitigations for the bug, but said it isn’t aware of any active attacks against it yet. The Oracle technology is licensed by software developers like...

PT-2012-3517

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server affected versions not specified Description Remote code execution issues exist due to the WebReady Document Viewing feature. This could allow code execution as Local System if a user views a specially crafted file...