CVE-2016-1000004 Microsoft Exchange Server Remote Code Execution Vulnerability

1. Vulnerability Overview: Title: CVE-2016-1000004 Microsoft Exchange Server 2013/2016 Remote Code Execution Vulnerability Description: A remote code execution vulnerability exists in Microsoft Exchange Server 2013 and 2016. This vulnerability allows attackers to execute arbitrary code on the target system. Severity: Critical CVSS Score: 9.8 (High) Release Date: 2016-05-10 Last Updated: 2016-05-10 2. Affected Products: Primary Affected Products: Microsoft Exchange Server 2013 (SP1, CU15) Microsoft Exchange Server 2016 (CU1) Specific Components: Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 15 Microsoft Exchange Server 2016 Cumulative Update 1 Other Mentioned Versions (potentially affected or fixed): Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 14 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 1 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 15 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 1 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 16 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 2 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 17 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 3 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 18 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 4 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 19 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 5 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 20 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 6 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 21 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 7 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 22 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 8 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 23 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 9 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 24 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 10 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 25 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 11 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 26 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 12 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 27 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 13 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 28 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 14 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 29 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 15 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 30 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 16 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 31 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 17 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 32 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 18 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 33 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 19 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 34 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 20 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 35 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 21 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 36 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 22 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 37 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 23 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 38 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 24 (and earlier versions) Microsoft Exchange Server 2013 Service Pack 1 Cumulative Update 39 (and earlier versions) Microsoft Exchange Server 2016 Cumulative Update 25 (and earlier ver

Goal Reached Thanks to every supporter — we hit 100%!

CVE-2016-1000004 Microsoft Exchange Server Remote Code Execution Vulnerability