The issue is related to insufficient input validation in Microsoft Exchange Server, allowing a remote attacker to execute arbitrary code by sending specially crafted data to the server. This can be exploited by attackers to gain unauthorized access and control over the server.