Lucene search
MicrosoftCVE-2013-1302HistoryMay 15, 2013 - 3:36 a.m.
CVE-2013-1302
2013-05-1503:36:33
CWE-119
microsoft
web.nvd.nist.gov
103
cve-2013-1302
microsoft communicator
lync 2010
lync server 2013
rce vulnerability
remote code execution
nvd
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.807
Percentile
98.3%
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka βLync RCE Vulnerability.β
Affected configurations
Node
microsoftlyncMatch2010attendee
ORmicrosoftlyncMatch2010x64
ORmicrosoftlyncMatch2010x86
ORmicrosoftlync_serverMatch2013
ORmicrosoftoffice_communicatorMatch2007r2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| microsoft | lync | 2010 | cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:* |
| microsoft | lync | 2010 | cpe:2.3:a:microsoft:lync:2010:*:x64:*:*:*:*:* |
| microsoft | lync | 2010 | cpe:2.3:a:microsoft:lync:2010:*:x86:*:*:*:*:* |
| microsoft | lync_server | 2013 | cpe:2.3:a:microsoft:lync_server:2013:*:*:*:*:*:*:* |
| microsoft | office_communicator | 2007 | cpe:2.3:a:microsoft:office_communicator:2007:r2:*:*:*:*:*:* |
Related
openvas
openvas
Microsoft Lync Attendee Remote Code Execution Vulnerability (2834695)
2013-05-15 00:00:00
Microsoft Lync Server Remote Code Execution Vulnerability (2834695)
2013-05-15 00:00:00
Microsoft Lync Remote Code Execution Vulnerability (2834695)
2013-05-15 00:00:00
symantec
symantec
Microsoft Lync CVE-2013-1302 Remote Code Execution Vulnerability
2013-05-14 00:00:00
seebug
seebug
Microsoft Lync θΏη¨δ»£η ζ§θ‘ζΌζ΄(CVE-2013-1302)(MS13-041)
2013-05-17 00:00:00
checkpoint_advisories
checkpoint_advisories
prion
prion
Code injection
2013-05-15 03:36:00
nvd
nvd
CVE-2013-1302
2013-05-15 03:36:33
cvelist
cvelist
CVE-2013-1302
2013-05-15 01:00:00
mskb
mskb
nessus
nessus
MS13-041: Vulnerability in Lync Could Allow Remote Code Execution (2834695)
2013-05-15 00:00:00
securityvulns
securityvulns
Microsoft Lync code execution
2013-05-27 00:00:00
CVSS2
9.3
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
AI Score
7.6
Confidence
Low
EPSS
0.807
Percentile
98.3%
Related for CVE-2013-1302