Microsoft Exchange Server

ソフト名：Microsoft Exchange Server 2007 SP2 for x64
回避策：MS10-106 (KB2407132)にて対応
脆弱性：DoS攻撃, 無限ループ
ソース：http://www.microsoft.com/exchange/2010/en/us/default.aspx
http://www.microsoft.com/technet/security/bulletin/MS10-106.mspx
http://secunia.com/advisories/42633/
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-3937
CVE：CVE-2010-3937
危険性：Medium Risk

Microsoft Exchange Server

ソフト名：Microsoft Exchange Server 2000 SP3/2007 SP1/2007 SP2
回避策：Microsoft Security Advisory (2401593)にて対応
脆弱性：CSRF, XSS, Webキャッシュ汚染
ソース：http://www.microsoft.com/technet/security/advisory/2401593.mspx
http://www.microsoft.com/technet/security/advisory/2401593.mspx
http://www.securityfocus.com/bid/41462
http://secunia.com/advisories/41421
http://www.vupen.com/english/advisories/2010/2391
危険性：Medium Risk

Microsoft Exchange Server

ソフト名：Microsoft Exchange Server 2003/2003 SP1
回避策：未対応
脆弱性：CSRF, XSS, Webキャッシュ汚染
ソース：http://www.microsoft.com/exchange/2010/en/us/default.aspx
http://www.exploit-db.com/exploits/14427/
http://www.securityfocus.com/bid/41843
危険性：Medium Risk

Microsoft Exchange Server

ソフト名：Microsoft Exchange Server 2007/2007 SP1/2007 SP2
回避策：アップデートにて対応
脆弱性：CSRF, XSS, Webキャッシュ汚染
ソース：http://www.microsoft.com/exchange/2010/en/us/default.aspx
http://sites.google.com/site/tentacoloviola/pwning-corporate-webmails
http://www.securityfocus.com/bid/41462
危険性：Medium Risk

Microsoft Exchange Server, Microsoft Windows

ソフト名：Microsoft Exchange Server 2003～2007 SP1, Microsoft Windows 2000 SP4, Microsoft Windows Server 2003 SP2～2008 R2 x64, Microsoft Windows XP SP2/SP3
回避策：MS10-024にて対応
脆弱性：スプーフィング攻撃, マンインミドル攻撃, DNSキャッシュ汚染
ソース：http://archives.neohapsis.com/archives/fulldisclosure/2010-05/0058.html
http://www.microsoft.com/technet/security/Bulletin/MS10-024.mspx
http://www.securityfocus.com/bid/39908
http://www.securityfocus.com/bid/39910
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1689
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1690
CVE：CVE-2010-1689, CVE-2010-1690
危険性：Medium Risk

Microsoft Exchange Server, Microsoft Windows

ソフト名：Microsoft Exchange Server 2003 SP2, Microsoft Windows 2000 SP4, Microsoft Windows Server 2003 SP2/SP2 x64/SP2 Itanium, Microsoft Windows XP SP2/SP3/SP2 x64 Professional, Microsoft Windows Server 2008 x32/2008 x64/SP2 x32/SP2 x64/SP2 Itanium/R2 x64
回避策：MS10-024にて対応
脆弱性：DoS攻撃, リスタートの強制, 機密情報の奪取
ソース：http://www.microsoft.com/technet/security/bulletin/ms10-024.mspx
http://www.securityfocus.com/bid/39308
http://www.securityfocus.com/bid/39381
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0024
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0025
http://secunia.com/advisories/39253
http://secunia.com/advisories/39376
CVE：CVE-2010-0024, CVE-2010-0025
危険性：Medium Risk