[BigFix-Announcements-Japan] BES Auto Notification: New Fixlets Published in Fixlet Site: 'Patches for Windows (Japanese)'

[autonotify at us.ibm.com]

Fixlet Site - 'Patches for Windows (Japanese)'
Current Version: 621	Published: Fri, 19 Dec 2014 02:08:27  GMT

New Fixlets:
============

***************************************************************
Title: MS14-075: Vulnerabilities in Microsoft Exchange Server Could Allow Elevation of Privilege - Exchange Server 2010 SP3 - KB2986475 (x64) - v2 (Japanese)
Severity: Important
Fixlet ID: 1407501
Fixlet Link: http://technet.microsoft.com/library/security/MS14-075

Fixlet Description: Microsoft has released a security update that resolves four privately reported vulnerabilities in Microsoft Exchange Server. The most severe of these vulnerabilities could allow elevation of privilege if a user clicks a specially crafted URL that takes them to a targeted Outlook Web App site. An attacker would have no way to force users to visit a specially crafted website. Instead, an attacker would have to convince them to visit the website, typically by getting them to click a link in an email message or Instant Messenger message that takes them to the attacker's website, and then convince them to click the specially crafted URL. After downloading and installing this update, affected computers will no longer be susceptible to these vulnerabilities.