Lucene search

K
mskbMicrosoftKB4020732
HistoryJun 13, 2017 - 7:00 a.m.

Description of the security update for Microsoft Lync 2010: June 13, 2017

2017-06-1307:00:00
Microsoft
support.microsoft.com
35

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.407 Medium

EPSS

Percentile

97.3%

Description of the security update for Microsoft Lync 2010: June 13, 2017

Summary

A remote code execution vulnerability exists due to the way Windows Uniscribe handles objects in memory. An attacker who successfully exploited this vulnerability could take control of the affected system. An attacker could then install programs; view, change, or delete data; or create new accounts with full user rights. Users whose accounts are configured to have fewer user rights on the system could be less impacted than users who operate with administrative user rights.
To learn more about the vulnerability, go to CVE-2017-0283.

How to obtain and install the update

Method 1: Windows Update

This update is available through Windows Update. When you turn on automatic updating, this update will be downloaded and installed automatically. For more information about how to turn on automatic updating, see Windows Update: FAQ.

Method 2: Microsoft Update Catalog

To get the stand-alone package for this update, go to the Microsoft Update Catalog website.

Method 3: Microsoft Download center

The following files are available for download from the Microsoft Download Center.

Microsoft Lync 2010 (x86)
Download the package now

Microsoft Lync 2010 (x64)
Download the package now

Release Date: June 13, 2017

For more information about how to download Microsoft support files, click the following article number to go to the article in the Microsoft Knowledge Base:How to obtain Microsoft support files from online services
Virus-scan claim Microsoft scanned this file for viruses by using the most current virus-detection software that was available on the date that the file was posted. The file is stored on security-enhanced servers that help prevent any unauthorized changes to it.

Deployment information

For deployment details for this security update, go to the following article in the Microsoft Knowledge Base:
Security update deployment information: June 13, 2017

More Information

How to obtain help and support for this security update

Help for installing updates: Windows Update: FAQ

Security solutions for IT professionals: TechNet Security Support and Troubleshooting

Help for protecting your Windows-based computer from viruses and malware: Microsoft Secure

Local support according to your country: International Support

File Information

__

Hash information

Package Name Package Hash SHA 1 Package Hash SHA 2
(x64) Lync.msp E62B6FF4D6A97B60B4C3D682688E0269219C8ADA 1257A711816F00AAB0EAA935B7B6728535D3BE04CF09FC13450D7649F54C6DE9
(x86) Lync.msp 90EF9A56E039A8AC80A73A73C49BA756D02E4CC2 B32FF589D53ECB8C5448097FA48E6AC7E8CC9AA491B41001377A806C27C7EDA8

x64-based versions

File name File version File size Date Time Platform
Appshapi.dll 4.0.7577.4409 1,141,920 25-Sep-2013 20:01 x86
Appshcom.dll 4.0.7577.4409 282,272 25-Sep-2013 20:01 x86
Appshvw.dll 4.0.7577.4388 1,896,600 11-Apr-2013 21:27 x86
Autohelper 4.0.7577.253 38,672 31-Mar-2011 08:45 Not Applicable
Communicatorexe 4.0.7577.4534 12,120,104 17-May-2017 04:24 x86
Crecplayerresexe 4.0.7577.4403 600,224 20-Jul-2013 01:04 x86
File_communicator.exe.manifest Not Applicable 1,185 23-Mar-2013 03:08 Not Applicable
File_cures.dll 4.0.7577.4456 686,376 28-Oct-2014 01:35 x86
File_meetingjoinaxoc 4.0.7577.4534 52,784 17-May-2017 04:22 Not Applicable
File_meetingjoinaxoc64 4.0.7577.4534 295,472 17-May-2017 06:59 Not Applicable
File_npmeetingjoinpluginoc.dll 4.0.7577.4534 33,336 17-May-2017 04:21 x86
File_ucaddin.dll 4.0.7577.4445 910,632 14-Apr-2014 21:09 x86
File_x64_ucaddin.dll 4.0.7577.4445 1,514,288 14-Apr-2014 22:16 x64
Ocpptview.dll 4.0.7577.4534 2,073,120 17-May-2017 04:22 x86
Ocpubmgrexe 4.0.7577.4403 2,371,744 20-Jul-2013 01:05 x86
Ocrecdll 4.0.7577.4403 791,704 20-Jul-2013 01:05 x86
Ogl.dll 4.0.7577.4534 1,712,152 17-May-2017 04:21 x86
Playback_annotationcontrols_dll 4.0.7577.4087 340,840 25-Mar-2012 02:42 x86
Playback_annotationtextmerge_dll 4.0.7577.4087 172,840 25-Mar-2012 02:42 x86
Playback_coreplaybackengine_dll 4.0.7577.4087 1,358,632 25-Mar-2012 02:40 x86
Playback_logging_dll 4.0.7577.4087 167,768 25-Mar-2012 02:42 x86
Playback_oc3playbackapplication_dll 4.0.7577.4087 163,632 25-Mar-2012 02:42 x86
Playback_uc_ui_utilities_dll 4.0.7577.4087 166,232 25-Mar-2012 02:42 x86
Psomdll 4.0.7577.4504 783,896 14-Jun-2016 07:34 x86
Rtmpltfm_dll 4.0.7577.4534 6,418,448 17-May-2017 04:22 x86
Saext.dll 4.0.7577.253 319,752 31-Mar-2011 08:43 x86
Sqmapidll 6.0.6000.16386 141,064 10-Feb-2011 11:28 x86
Uccp_dll 4.0.7577.4456 5,958,952 28-Oct-2014 01:38 x86
Ucdll 4.0.7577.4484 13,333,792 25-Oct-2015 07:15 x86
Ucmapi64exe 4.0.7577.4409 2,458,264 25-Sep-2013 21:08 x64
Ucmapiexe 4.0.7577.4409 648,344 25-Sep-2013 20:01 x86
Xceedzip.dll 6.5.10316.0 634,560 16-May-2012 18:39 x86

x86-based versions

File name File version File size Date Time Platform
Appshapi.dll 4.0.7577.4409 1,141,920 25-Sep-2013 20:01 x86
Appshcom.dll 4.0.7577.4409 282,272 25-Sep-2013 20:01 x86
Appshvw.dll 4.0.7577.4388 1,896,600 11-Apr-2013 21:27 x86
Autohelper 4.0.7577.253 38,672 31-Mar-2011 08:45 Not Applicable
Communicatorexe 4.0.7577.4534 12,120,104 17-May-2017 04:24 x86
Crecplayerresexe 4.0.7577.4403 600,224 20-Jul-2013 01:04 x86
File_communicator.exe.manifest Not Applicable 1,185 23-Mar-2013 03:08 Not Applicable
File_cures.dll 4.0.7577.4456 686,376 28-Oct-2014 01:35 x86
File_meetingjoinaxoc 4.0.7577.4534 52,784 17-May-2017 04:22 Not Applicable
File_npmeetingjoinpluginoc.dll 4.0.7577.4534 33,336 17-May-2017 04:21 x86
File_ucaddin.dll 4.0.7577.4445 910,632 14-Apr-2014 21:09 x86
Ocpptview.dll 4.0.7577.4534 2,073,120 17-May-2017 04:22 x86
Ocpubmgrexe 4.0.7577.4403 2,371,744 20-Jul-2013 01:05 x86
Ocrecdll 4.0.7577.4403 791,704 20-Jul-2013 01:05 x86
Ogl.dll 4.0.7577.4534 1,712,152 17-May-2017 04:21 x86
Playback_annotationcontrols_dll 4.0.7577.4087 340,840 25-Mar-2012 02:42 x86
Playback_annotationtextmerge_dll 4.0.7577.4087 172,840 25-Mar-2012 02:42 x86
Playback_coreplaybackengine_dll 4.0.7577.4087 1,358,632 25-Mar-2012 02:40 x86
Playback_logging_dll 4.0.7577.4087 167,768 25-Mar-2012 02:42 x86
Playback_oc3playbackapplication_dll 4.0.7577.4087 163,632 25-Mar-2012 02:42 x86
Playback_uc_ui_utilities_dll 4.0.7577.4087 166,232 25-Mar-2012 02:42 x86
Psomdll 4.0.7577.4504 783,896 14-Jun-2016 07:34 x86
Rtmpltfm_dll 4.0.7577.4534 6,418,448 17-May-2017 04:22 x86
Saext.dll 4.0.7577.253 319,752 31-Mar-2011 08:43 x86
Sqmapidll 6.0.6000.16386 141,064 10-Feb-2011 11:28 x86
Uccp_dll 4.0.7577.4456 5,958,952 28-Oct-2014 01:38 x86
Ucdll 4.0.7577.4484 13,333,792 25-Oct-2015 07:15 x86
Ucmapiexe 4.0.7577.4409 648,344 25-Sep-2013 20:01 x86
Xceedzip.dll 6.5.10316.0 634,560 16-May-2012 18:39 x86

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.407 Medium

EPSS

Percentile

97.3%