MS14-008  Vulnerability in Microsoft Forefront Protection for Exchange Could Allow Remote Code Execution

2014-02-11 This security update resolves a privately reported vulnerability in Microsoft Forefront. The vulnerability could allow remote code execution if a specially crafted email message is scanned.
Vulnerabilities addressed in this bulletin:

RCE Vulnerability

A remote code execution vulnerability exists in Forefront Protection for Exchange. An attacker who successfully exploited this vulnerability could run arbitrary code in the security context of the configured service account.
CVE-2014-0294

Bulletin details at Microsoft.com