MS12-058 - Critical : Vulnerabilities in Microsoft Exchange Server WebReady Document Viewing Could A

Discussion in 'Security Alerts' started by News, Aug 14, 2012.

  1. News

    News Extraordinary Robot
    News Feed

    Joined:
    Jun 27, 2006
    Messages:
    26,189
    Likes Received:
    20
    Severity Rating: Critical
    Revision Note: V1.0 (August 14, 2012): Bulletin published.
    Summary: This security update resolves publicly disclosed vulnerabilities in Microsoft Exchange Server WebReady Document Viewing. The vulnerabilities could allow remote code execution in the security context of the transcoding service on the Exchange server if a user previews a specially crafted file using Outlook Web App (OWA). The transcoding service in Exchange that is used for WebReady Document Viewing is running in the LocalService account. The LocalService account has minimum privileges on the local computer and presents anonymous credentials on the network.

    More...
     

Share This Page

Loading...