Microsoft Forefront Protection Remote Code Execution Vulnerability

Last Update Date: 12 Feb 2014 12:16 Release Date: 12 Feb 2014 4048 Views

RISK: High Risk

TYPE: Servers - Other Servers

A remote code execution vulnerability exists in Forefront Protection for Exchange. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the configured service account.

Impact

Remote Code Execution

System / Technologies affected

Microsoft Forefront Protection 2010 for Exchange Server

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Download location for patches:
http://technet.microsoft.com/en-us/security/bulletin/MS14-008

Vulnerability Identifier

CVE-2014-0294

Source

Microsoft