Multiple vulnerabilities in Microsoft Exchange Server

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to spoof user interface. obtain sensitive information or gain privileges.

Below is a complete list of vulnerabilities

1. An improper email messages parsing can be exploited remotely via a specially designed email to obtain sensitive information;
2. An improper open redirect handling can be exploited remotely via a specially designed URL to spoof user interface;
3. An improper meeting invitation handling can be exploited remotely via a specially designed Outlook meeting to gain privileges.

Ursprüngliche Informationshinweise

• ADV160006

• CVE-2016-0138
• CVE-2016-3379
• CVE-2016-3378

CVE Liste

• CVE-2016-0138
  critical
• CVE-2016-3379
  critical
• CVE-2016-3378
  critical

KB Liste

• 3184711
• 3184736
• 3184728

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com