OSVDB ID: 25338 Title: Microsoft Exchange Collaboration Data Objects Crafted Email Code Execution |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Exchange contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered due to an error within the EXCDO (Exchange Collaboration Data Objects) and CDOEX (Collaboration Data Objects for Exchange) functionality when processing iCal and vCal properties in email messages. It is possible that the flaw may allow remote code execution resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Patch / RCS Exploit: Exploit Public Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, the vendor has released a patch to address this vulnerability. |
Products |
|
References |
Credit |
Unknown or Incomplete |