CVE-2010-3937

Опубликовано: 16 дек. 2010

Источник: nvd

CVSS2: 4

EPSS Средний

Описание

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."

Ссылки

http://www.securityfocus.com/bid/45297
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024888
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-348A.html
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-106
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12019
Third Party Advisory
http://www.securityfocus.com/bid/45297
Third Party Advisory
VDB Entry
http://www.securitytracker.com/id?1024888
Third Party Advisory
VDB Entry
http://www.us-cert.gov/cas/techalerts/TA10-348A.html
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-106
Patch
Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12019
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:exchange_server:2007:sp2:*:*:*:*:x64:*

EPSS

Процентиль: 97%

0.33663

Средний

4 Medium

CVSS2

Дефекты

CWE-399

Связанные уязвимости

GHSA-mggf-xr95-8r5v

github

больше 3 лет назад