Information disclosure vulnerability in Microsoft Exchange Server

Beschreibung

An improper HTML messages parsing was found in Microsoft Exchange Server. By exploiting this vulnerability malicious users can obtain sensitive information. This vulnerability can be exploited remotely via a specially designed email message.

Also this advisory related to update Oracle components with critical vulnerabilities.

---

Technical details

This vulnerability allows attacker to track a user online if the user views email messages using Outlook Web Access.

Ursprüngliche Informationshinweise

• CVE-2016-0028

CVE Liste

• CVE-2016-0028
  warning

KB Liste

• 3151086
• 3150501
• 3151097

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com