PT-2012-3517 · Microsoft · Exchange Server

Will Dorman · Publicado 2012-07-17 · Atualizado 2018-10-12 · CVE-2012-1766

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Baixa

Vetor base

AV:L/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server (affected versions not specified)

Description Remote code execution issues exist due to the WebReady Document Viewing feature. This could allow code execution as Local System if a user views a specially crafted file through Outlook Web Access in a browser. An attacker could run code on the server, but only with LocalService privileges, which have minimal local computer privileges and present anonymous network credentials.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2012-1766

Produtos afetados

Exchange Server

Referências · 16

• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15724 · Nota
• http://technet.microsoft.com/en-us/security/bulletin/ms12-058 · Nota
• http://blogs.technet.com/b/srd/archive/2012/07/24/more-information-on-security-advisory-2737111.aspx · Nota
• http://securitytracker.com/id?1027264 · Nota
• http://oracle.com/technetwork/topics/security/cpujul2012-392727.html · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1766 · Nota de Segurança
• http://technet.microsoft.com/security/advisory/2737111 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-067 · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-1766 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/76999 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-058 · Aviso do Fabricante
• http://kb.cert.org/vuls/id/118913 · Nota
• http://www-01.ibm.com/support/docview.wss?uid=swg21660640 · Nota
• http://mandriva.com/security/advisories?name=MDVSA-2013:150 · Aviso do Fabricante
• http://securityfocus.com/bid/54531 · Nota