17 matches found
Description of the cumulative update for Lync 2010 Attendee - Administrator level installation: June 2012
Describes the cumulative update for Lync 2010 Attendee, Administrator level installation that is dated June 2012.SummaryThis article describes the issue that is fixed in the cumulative update for Microsoft Lync 2010 Attendee - Administrator level installation that is dated June 2012.This article...
MS13-054: Description of the security update for Lync 2010 Attendee (user level install): July 9, 2013
Resolves a vulnerability that could allow remote code execution on a client system if a user views shared content that embeds TrueType font files.View products that this article applies to.IntroductionThis update resolves a vulnerability that could allow remote code execution on a client system i...
Description of the cumulative update package for Communicator 2007 R2: November 2010
Describes the issues that are fixed in the November, 2010 cumulative update package for Communicator 2007 R2.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated November 2010.This article describes the...
PT-2016-5420
Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT 8.1 Microsoft Windows 10 versions Gold through 1607 Microsoft...
CVE-2015-6061: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka "Server Input Validation Information Disclosure...
PT-2015-2714
Name of the Vulnerable Software and Affected Versions Microsoft Lync versions 2010 through 2013 SP1 Microsoft Skype for Business version 2016 Lync 2010 Attendee affected versions not specified Lync Room System affected versions not specified Description The issue exists due to inadequate protecti...
CVE-2015-2431: Improper Input Validation
Microsoft Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, and Lync Basic 2013 SP1 allow remote attackers to execute arbitrary code via a crafted Office Graphics Library OGL font, aka "Microsoft Office Graphics Component Remote Code Execution...
PT-2014-1673
Name of the Vulnerable Software and Affected Versions Microsoft Windows Server 2003 SP2 Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold an...
MS13-054: Vulnerability in GDI+ Could Allow Remote Code Execution (2848295)
The version of Microsoft's GDI+ subsystem installed on the remote host has an unspecified code execution vulnerability. Specially crafted TrueType font files are not processed properly. A remote, unauthenticated attacker could exploit this vulnerability by getting a user to view content that...
PT-2013-3060
Name of the Vulnerable Software and Affected Versions Lync Server 2013 Lync 2010 Lync 2010 Attendee Microsoft Communicator 2007 R2 Description The issue arises from improper handling of objects in memory, allowing remote attackers to execute arbitrary code. This can be achieved by sending an...
CVE-2013-1302: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."...
MS12-039: Description of the security update for Lync 2010 Attendee (user level install): June 12, 2012
Resolves vulnerabilities in Microsoft Lync that could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts.INTRODUCTIONMicrosoft has released security bulletin MS12-039. To view the complete security bulletin, go to one of the following Microso...
CVE-2012-1849: Undefined Security Weakness
Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading...
CVE-2012-1858: Exposure of Sensitive Information to an Unauthorized Actor
The toStaticHTML API aka the SafeHTML component in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted...
Microsoft Teams help & learning
None None...