Not rated
CVE-2019-1084 An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having…
Description
An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Exchange Server | Versions not published | |
| Microsoft Outlook | Versions not published | |
| Microsoft Office | Versions not published | |
| Microsoft Lync | Versions not published | |
| Microsoft Lync Basic | Versions not published | |
| Microsoft Outlook for Android | Versions not published | |
| Skype for Business | Versions not published | |
| Skype for Business Basic | Versions not published | |
| Office 365 ProPlus | Versions not published |
Show the 5 other branches Hide the 5 other branches
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft Exchange Server 2016 | Versions not published | |
| Microsoft Exchange Server 2019 | Versions not published | |
| Microsoft Exchange Server 2013 | Versions not published | |
| Mail and Calendar | Versions not published | |
| Outlook for iOS | Versions not published |
References
- portal.msrc.microsoft.com portal.msrc.microsoft.com
Timeline
- Published
- Last modified
Other CVEs of Microsoft Exchange Server
The 18 CVEs of Microsoft Exchange Server →
CVE-2019-1136
An elevation of privilege vulnerability exists in Microsoft Exchange Server, aka 'Microsoft Exchange Server Elevation of…
Not rated
CVE-2019-0858
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle…
Not rated
CVE-2019-0817
A spoofing vulnerability exists in Microsoft Exchange Server when Outlook Web Access (OWA) fails to properly handle…
Not rated
CVE-2019-0586
A remote code execution vulnerability exists in Microsoft Exchange software when the software fails to properly handle…
Not rated