CVE-2017-0129

CVE-2017-0129 is a certificate-validation vulnerability in Microsoft Lync for Mac 2011. The flaw stems from improper X.509 certificate validation, enabling a remote attacker to tamper with TLS-secured communications (man‑in‑the‑middle) between server and client. Connected sources confirm the vuln...

CVE-2017-0129

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."...

CVE-2017-0129: Improper Certificate Validation

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."...

PT-2017-10429

Name of the Vulnerable Software and Affected Versions Microsoft Lync for Mac 2011 Description The issue arises from the failure to properly validate certificates, which allows remote attackers to alter server-client communications. Recommendations For Microsoft Lync for Mac 2011, ensure that...

CVE-2017-0108

The Windows Graphics Component in Microsoft Office 2007 SP3; 2010 SP2; and Word Viewer; Skype for Business 2016; Lync 2013 SP1; Lync 2010; Live Meeting 2007; Silverlight 5; Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; and Windows 7 SP1 allows remote attackers to execute arbitrary code v...

MS17-014: Security Update for Microsoft Office (4013241) (macOS)

The Microsoft Office application installed on the remote macOS or Mac OS X host is missing a security update. It is, therefore, affected by multiple vulnerabilities : - Multiple remote code execution vulnerabilities exist in Microsoft Office software due to improper handling of objects in memory...

Microsoft Lync for Mac Certificate Validation Vulnerability

A security feature bypass exists when the Lync for Mac 2011 client fails to properly validate certificates. An attacker who successfully exploited this vulnerability could tamper with trusted communications between the server and target client. To exploit the vulnerability, an attacker would need...

Microsoft Teams help & learning

None None...

MS17-013: Security Update for Microsoft Graphics Component: March 14, 2017

Resolves vulnerabilities in the Microsoft Graphics Component on Microsoft Windows, Microsoft Office, Skype for Business, Silverlight and Microsoft Lync.SummaryThis security update resolves vulnerabilities in the Microsoft Graphics Component on Microsoft Windows, Microsoft Office, Skype for...

Microsoft Windows Graphics Component CVE-2017-0060 Local Information Disclosure Vulnerability

Description Microsoft Windows is prone to a local information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft Live Meeting 2007 Add-in Microsoft Live Meeting 2007 Console Microsoft Lync...

PT-2017-1527

Name of the Vulnerable Software and Affected Versions Microsoft Office 2007 SP3 Microsoft Office 2010 SP2 Word Viewer Skype for Business 2016 Lync 2013 SP1 Lync 2010 Live Meeting 2007 Silverlight 5 Windows Vista SP2 Windows Server 2008 SP2 and R2 SP1 Windows 7 SP1 Description The issue allows...

Microsoft Lync for Mac CVE-2017-0129 SSL Certificate Validation Security Bypass Vulnerability

Description Microsoft Lync for Mac is prone to a security-bypass vulnerability that affects the IP-HTTPS server component. Successful exploits may allow attackers to perform man-in-the-middle attacks or impersonate trusted clients, which will aid in further attacks. Technologies Affected Microsof...

Description of the cumulative update package for Communicator 2007 R2: November 2010

Describes the issues that are fixed in the November, 2010 cumulative update package for Communicator 2007 R2.SummaryThis article describes the Microsoft Office Communicator 2007 R2 issues that are fixed in the update for Communicator 2007 R2 that is dated November 2010.This article describes the...

MS15-097: Description of the security update for the graphics component in Windows Vista and Windows Server 2008: September 8, 2015

MS15-097: Description of the security update for the graphics component in Windows Vista and Windows Server 2008: September 8, 2015 Summary This security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync. The most severe of these vulnerabilities could allow remote...

MS14-036: Description of the security update for Office 2010: August 12, 2014

MS14-036: Description of the security update for Office 2010: August 12, 2014 INTRODUCTION Microsoft has released security bulletin MS14-036. To learn more about this security bulletin: Home users: https://www.microsoft.com/security/pc-security/updates.aspxSkip the details: Download the updates f...

MS14-036: Description of the security update for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, and Windows Server 2003: June 10, 2014

MS14-036: Description of the security update for Windows 7, Windows Server 2008 R2, Windows Server 2008, Windows Vista, and Windows Server 2003: June 10, 2014 Introduction This security update resolves vulnerabilities in Microsoft Windows, Microsoft Office, and Microsoft Lync that could allow...

MS14-036: Description of the security update for Windows 8.1 and Windows Server 2012 R2: June 10, 2014

MS14-036: Description of the security update for Windows 8.1 and Windows Server 2012 R2: June 10, 2014 Introduction This security update resolves vulnerabilities in Windows, Microsoft Office, and Microsoft Lync that could allow remote code execution if a user opens a specially crafted file or...

HPE Sizer for Microsoft Lync Server Remote Arbitrary Code Execution Vulnerability

HPE Sizer for Microsoft Lync Server is prone to a remote arbitrary code execution vulnerability. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-onl...

HPE Sizing for Microsoft Lync Server Detection (Windows SMB Login)

Detects the installed version of HPE Sizing Tool for Microsoft Lync Server. The script logs in via smb, searches for SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2016-3396: Undefined Security Weakness

Graphics Device Interface aka GDI or GDI+ in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; Windows 10 Gold, 1511, and 1607; Office 2007 SP3; Office 2010 SP2; Word Viewer; Skype for Business 2016; Lync...