Impacting Exchange 2007 and 2010
Security Advisory 2737111 released – MSRC – Site Home – TechNet Blogs:
More information on Security Advisory 2737111 – Security Research & Defense – Site Home – TechNet Blogs:
Overview of Exchange 2007 Outlook Web Access WebReady Document Viewing – Exchange Team Blog – Site Home – TechNet Blogs:
http://blogs.technet.com/b/exchange/archive/2007/03/23/3401668.aspx <<<< vulnerable thing
While we don’t have the advanced search in SharePoint, we do have the Outlook Web Access WebReady Document Viewing thing enabled on Exchange 2007 and above (it’s not there in 2003 so no need to panic or take action).
If you want to adjust this using GUI rather than Powershell just untick the box on the Exchange console under Server organization/Client Access, OWA, then Private computer file access, uncheck Enable WebReady Document Viewing.