CVE-2012-4791
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to...
CVE-2012-4791 is a low vulnerability (CVSS 3.5) in Microsoft Exchange Server, published December 12, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 13.4%, the 96th percentile. No source names a fixed version.
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
- Record
CVE-2012-4791- CVSS 2.0
- 3.5 Low
AV:N/AC:M/Au:S/C:N/I:N/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
- Record
CVE-2012-4791- Updated
- 2026-11-02
EUVDEUVD-2012-4716 No score
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
- Record
EUVD-2012-4716- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9994-2hp8-8394 No score
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to...
Microsoft Exchange Server 2007 SP3 and 2010 SP1 and SP2 allows remote authenticated users to cause a denial of service (Information Store service hang) by subscribing to a crafted RSS feed, aka "RSS Feed May Cause Exchange DoS Vulnerability."
- Record
GHSA-9994-2hp8-8394- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |
References
us-cert.gov/cas/techalerts/TA12-346A.html
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16158
docs.microsoft.com/en-us/security-updates/securitybulletins/2012/ms12-080
securityfocus.com/bid/56836
nvd.nist.gov/vuln/detail/CVE-2012-4791
github.com/advisories/GHSA-9994-2hp8-8394