One email away from remote code execution (Exchange Vuln) [pdf]

welivesecurity.com