237 matches found
CVE-2012-1849
Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading...
CVE-2012-1849
CVE-2012-1849 is an Untrusted search path DLL loading vulnerability in Microsoft Lync 2010 and related components (Attendee/Attendant). The root cause is loading of a Trojan horse DLL from the current working directory, demonstrated with a .ocsmeet file, enabling local privilege elevation. Affect...
CVE-2012-1849
Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading...
Microsoft Lync CVE-2012-1849 DLL Loading Arbitrary Code Execution Vulnerability
Description Microsoft Lync is prone to vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share location which contains a specially crafted Dynamic Link Library...
Microsoft Windows TrueType Font Engine CVE-2012-0159 Remote Code Execution Vulnerability
Description Microsoft Windows is prone to a remote code-execution vulnerability that affects the TrueType Font engine. An attacker can exploit this issue through the Windows Kernel-Mode drivers to execute arbitrary code in kernel mode. The attacker can also exploit this issue through Microsoft...
Microsoft Windows 'Win32k.sys' TrueType Font Handling Remote Code Execution Vulnerability
Description Microsoft Windows kernel is prone to a remote code-execution vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into opening a specially malformed TrueType font. Successful exploits can allow attackers to execute arbitrary code with kernel-level...
Microsoft Lync Web组件服务器"reachLocale"跨站脚本漏洞
Microsoft Lync Server是一款微软发布整合通讯解决方案 传递给WEB组件服务器Reach/Client/WebPages/ReachJoin.aspx脚本的"reachLocale"参数的输入在返回用户之前缺少过滤，攻击者可以利用漏洞进行跨站脚本攻击，可获得敏感信息或劫持用户会话 0 Microsoft Lync 2010 厂商解决方案 用户可参考如下供应商提供的安全公告获得补丁信息： http://support.microsoft.com/kb/2500441...
Javascript Injection in Microsoft Lync 4.0.7577.0
============================================================================ Foofus.net Security Advisory: foofus-20110610 ============================================================================ Title: Javascript Injection in Microsoft Lync Version: 4.0.7577.0 Vendor: Microsoft Release Date:...
Microsoft Lync 4.0.7577.0 Javascript Injection
============================================================================ Foofus.net Security Advisory: foofus-20110610 ============================================================================ Title: Javascript Injection in Microsoft Lync Version: 4.0.7577.0 Vendor: Microsoft Release Date:...
Microsoft Lync Server 2010 - ReachJoin.aspx Remote Command Injection
Microsoft Lync Server 2010 - ReachJoin.aspx Remote Command Injection source: https://www.securityfocus.com/bid/48235/info Microsoft Lync Server 2010 is prone to a remote command-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit this issue to...
Microsoft Lync Server 2010 - 'ReachJoin.aspx' Remote Command Injection
source: https://www.securityfocus.com/bid/48235/info Microsoft Lync Server 2010 is prone to a remote command-injection vulnerability because it fails to properly sanitize user-supplied input. Attackers can exploit this issue to execute arbitrary commands in the context of the application. Microso...
Update for Microsoft Lync 2013 (KB2889923) 32-Bit Edition
Update for Microsoft Lync 2013 KB2889923 32-Bit Edition...
Security update 1970-01-01
...
Microsoft Teams help & learning
None None...
Security Update for Lync Server 2013 Core Components (KB2992965)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...
Security Update for Lync Server 2010 Response Group Service (KB2982388)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...
Security Update for Lync Server 2010 (KB2982385)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...
Security Update for Lync 2010 X86 (KB3188397)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...
Security Update for Lync 2010 X64 (KB2963285)
A security issue has been identified in a Microsoft Lync software product that could affect your system. You can help protect your system by installing this update from Microsoft. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base...
Security Update for Lync 2010 Attendant (KB 2702444)
This security update resolves one publicly disclosed vulnerability and three privately reported vulnerabilities in Microsoft Lync. The most severe vulnerabilities could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts...