CVE-2013-1302

The CVE-2013-1302 issue affects Microsoft Lync-related clients and servers (Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, Lync Server 2013). It is a use-after-free in which Lync components fail to handle memory objects that have been deleted, enabling remote code execution when a user is i...

CVE-2013-1302: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."...

Microsoft Lync Remote Code Execution Vulnerability (2834695)

This host is missing an important security update according to Microsoft Bulletin MS13-041. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2012-2520: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office W...

Microsoft Lync Remote Code Execution Vulnerabilities (2707956)

This host is missing a critical security update according to Microsoft Bulletin MS12-039. OpenVAS Vulnerability Test $Id: secpodms12-039.nasl 6473 2017-06-29 06:07:30Z cfischer $ Microsoft Lync Remote Code Execution Vulnerabilities 2707956 Authors: Sooraj KS Copyright: Copyright c 2012 SecPod,...

msoffice-dos.txt

!usr/bin/perl -w Microsoft Communicator allows remote attackers to cause a denial of service memory consumption via a large number of SIP INVITE requests, which trigger the creation of many sessions. Refer: http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2008-5180...

Code injection

Microsoft Communicator allows remote attackers to cause a denial of service application or device outage via instant messages containing large numbers of emoticons...

CVE-2008-5181

Microsoft Communicator allows remote attackers to cause a denial of service application or device outage via instant messages containing large numbers of emoticons...

CVE-2008-5180

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service memory consumption via a large number of SIP INVITE requests, which trigger the creation of many sessions...

CVE-2008-5181

Microsoft Communicator allows remote attackers to cause a denial of service application or device outage via instant messages containing large numbers of emoticons...

CVE-2008-5180

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service memory consumption via a large number of SIP INVITE requests, which trigger the creation of many sessions...

CVE-2008-5181: Undefined Security Weakness

Microsoft Communicator allows remote attackers to cause a denial of service application or device outage via instant messages containing large numbers of emoticons...

CVE-2008-5180: Allocation of Resources Without Limits or Throttling

Microsoft Communicator, and Communicator in Microsoft Office 2010 beta, allows remote attackers to cause a denial of service memory consumption via a large number of SIP INVITE requests, which trigger the creation of many sessions...

Microsoft Office不安全文档签名漏洞

Microsoft Office 2007是一款微软开发的流行的办公处理应用程序。 Microsoft Office 2007不安全对基于XML文档的签名，远程攻击者可以利用漏洞伪造签名，使目标用户盲目信任文档。 Microsoft Office文档根据文件中docProps/core.xml的DublinCore metadata来携带META数据信息，在这些META数据信息中"LastModifiedBy", "creator"字段可通过"Office Button - Prepare -...