CVE-2010-3937: Microsoft Exchange Server

Medium severity, CVSS 4.0. EPSS: 18.7% chance of exploitation in the next 30 days.

Microsoft Exchange Server 2007 SP2 on the x64 platform allows remote authenticated users to cause a denial of service (infinite loop and MSExchangeIS outage) via a crafted RPC request, aka "Exchange Server Infinite Loop Vulnerability."

Affected products

• Microsoft Exchange Server: version 2007 only

Published 2010-12-16. Last modified 2026-06-16.