PT-2012-5593 · Microsoft · Exchange Server

Published 2012-12-11 · Updated 2019-06-01 · CVE-2012-4791

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Low

Base vector

AV:N/AC:M/Au:S/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Microsoft Exchange Server versions 2007 SP3 through 2010 SP2

Description A denial of service issue exists due to improper handling of RSS feeds, which could cause the Information Store service to become unresponsive. This condition may lead to Exchange databases dismounting and potentially result in database corruption, affecting user mailboxes.

Recommendations For Microsoft Exchange Server versions 2007 SP3 through 2010 SP2, consider disabling the RSS feed subscription feature as a temporary workaround until a patch is available. Restrict access to crafted RSS feeds to minimize the risk of exploitation.

Fix

DoS

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2012-4791

Affected Products

Exchange Server

References · 8

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-080 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4791 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2012-4791 · Security Note
• http://securityfocus.com/bid/56836 · Note
• http://technet.microsoft.com/en-us/security/bulletin/ms12-080 · Note
• http://us-cert.gov/cas/techalerts/TA12-346A.html · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16158 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-4791 · Note