Multiple vulnerabilities in Microsoft Exchange Server

説明

Multiple serious vulnerabilities were found in Microsoft Exchange Server. Malicious users can exploit these vulnerabilities to execute arbitrary code and bypass security restrictions.

Below is a complete list of vulnerabilities:

1. An tampering vulnerability can be exploited via specially crafted application to bypass security restrictions;
2. An improper memory handling vulnerability can be exploited remotely via specially crafted email to execute arbitrary code;

オリジナルアドバイザリー

• CVE-2018-8374

• CVE-2018-8302

関連製品

• Microsoft-Exchange-Server

CVEリスト

• CVE-2018-8374
  warning
• CVE-2018-8302
  critical

KBリスト

• 4340733
• 4340731

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com