PT-2012-5593
CVE-2012-4791
·
Published
2012-12-11
·
Updated
2019-06-01
Description by
CVSS 2.0
3.5
LowMetricsAV:N/AC:M/Au:S/C:N/I:N/A:P
Name of the Vulnerable Software and Affected Versions
Microsoft Exchange Server versions 2007 SP3 through 2010 SP2
Description
A denial of service issue exists due to improper handling of RSS feeds, which could cause the Information Store service to become unresponsive. This condition may lead to Exchange databases dismounting and potentially result in database corruption, affecting user mailboxes.
Recommendations
For Microsoft Exchange Server versions 2007 SP3 through 2010 SP2, consider disabling the RSS feed subscription feature as a temporary workaround until a patch is available. Restrict access to crafted RSS feeds to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾