N/A

An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters. An authenticated attacker could exploit this vulnerability by creating entities with invalid display names, which, when added to conversations, remain invisible. This security update addresses the issue by validating display names upon creation in Microsoft Exchange, and by rendering invalid display names correctly in Microsoft Outlook clients., aka 'Microsoft Exchange Information Disclosure Vulnerability'.

N/A

N/A

Microsoft Exchange Server 信息泄露漏洞

Microsoft Exchange Server是美国微软（Microsoft）公司的一套电子邮件服务程序。它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。 Microsoft Exchange中存在信息泄露漏洞。攻击者可利用该漏洞获取敏感信息。以下产品及版本受到影响：Microsoft Exchange Server 2010 SP3，Exchange Server 2013 Cumulative Update 23，Exchange Server 2016 Cumulative Updat

N/A

N/A