(MS13-012) Vulnerabilities in Microsoft Exchange Server Could Allow Remote Code Execution (2809279)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: CRITICAL

  Advisory Date: MAR 13, 2013

---

  DESCRIPTION

This patch addresses vulnerabilities found in Microsoft Exchange Server. One of the vulnerabilities, which exists in Microsoft Exchange Server WebReady Document Viewing can allow remote code execution in relation to transcoding service on the Exchange server, once affected users user previews a specially crafted file via Outlook Web App (OWA).

  SOLUTION

  PATCH: http://technet.microsoft.com/en-us/security/bulletin/ms13-012

  AFFECTED SOFTWARE AND VERSION

• Microsoft Exchange Server 2007 Service Pack 3
• Microsoft Exchange Server 2010 Service Pack 2

Related Vulnerability

• February 2013 - Microsoft Releases 12 Security Advisories