CVE-2019-1233High

Microsoft Exchange Denial of Service Vulnerability

Published
September 10, 2019
Last Modified
—

🔗 CVE IDs covered (1)

📋 Description

A denial of service vulnerability exists in Microsoft Exchange Server software when the software fails to properly handle objects in memory. An attacker who successfully exploited the vulnerability could cause a remote denial of service against a system. Exploitation of the vulnerability requires that a specially crafted email be sent to a vulnerable Exchange server. The security update addresses the vulnerability by correcting how Microsoft Exchange Server handles objects in memory.

🎯 Affected products4

  • Microsoft Exchange Server 2016 Cumulative Update 12
  • Microsoft Exchange Server 2016 Cumulative Update 13
  • Microsoft Exchange Server 2019 Cumulative Update 1
  • Microsoft Exchange Server 2019 Cumulative Update 2

✅ Remediation

KB4515832 (Security Update)

🔗 References (6)