PT-2012-5593 · Microsoft · Exchange Server

Publicado 2012-12-11 · Atualizado 2019-06-01 · CVE-2012-4791

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2007 SP3 through 2010 SP2

Description A denial of service issue exists due to improper handling of RSS feeds, which could cause the Information Store service to become unresponsive. This condition may lead to Exchange databases dismounting and potentially result in database corruption, affecting user mailboxes.

Recommendations For Microsoft Exchange Server versions 2007 SP3 through 2010 SP2, consider disabling the RSS feed subscription feature as a temporary workaround until a patch is available. Restrict access to crafted RSS feeds to minimize the risk of exploitation.

Correção

DoS

Code Injection

Enumeração de Fraquezas

CWE-94

Identificadores relacionados

CVE-2012-4791

Produtos afetados

Exchange Server

Referências · 8

• http://securityfocus.com/bid/56836 · Nota
• http://technet.microsoft.com/en-us/security/bulletin/ms12-080 · Nota
• http://us-cert.gov/cas/techalerts/TA12-346A.html · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-080 · Aviso do Fabricante
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16158 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4791 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4791 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2012-4791 · Nota de Segurança