CVE:CVE-2018-0986
CNNVD:CNNVD-201804-315
Microsoft Exchange Server 2013等都是美国微软（Microsoft）公司的产品。Microsoft Exchange Server 2013是一套电子邮件服务程序，它提供邮件存取、储存、转发，语音邮件，邮件过滤筛选等功能。Security Essentials是一款安全软件，用于防止病毒、间谍软件和其他恶意软件入侵。Malware Protection Engine是其中的一个恶意软件保护引擎。
Microsoft Malware Protection Engine中存在缓冲区错误漏洞，该漏洞源于程序没有正确的扫描特制的文件。远程攻击者可借助特制的文件利用该漏洞执行代码。以下产品受到影响：Microsoft Exchange Server 2013，2016；Microsoft Forefront Endpoint Protection 2010；Microsoft Security Essentials；Microsoft System Center 2012 Endpoint Protection，Microsoft System Center 2012 R2 Endpoint Protection，Microsoft System Center Endpoint Protection；Windows Defender；Windows Intune Endpoint Protection。
solution:Upgrade microsoft exchange_server to a higher version than 2013,2016,and avoid the version 2013,2016; Upgrade microsoft security_essentials to a higher version than -; Upgrade microsoft forefront_endpoint_protection_2010 to a higher version than -; Upgrade microsoft intune_endpoint_protection to a higher version than -; Upgrade microsoft system_center_endpoint_protection to a higher version than *,2012,2012:r2,and avoid the version 2012,2012:r2; Upgrade microsoft windows_defender to a higher version than -