133 matches found
CVE-2013-1302: Improper Restriction of Operations within the Bounds of a Memory Buffer
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."...
Microsoft Lync Attendee Remote Code Execution Vulnerability (2834695)
This host is missing an important security update according to Microsoft Bulletin MS13-041. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
MS12-039: Description of the security update for Lync 2010 Attendee (user level install): June 12, 2012
Resolves vulnerabilities in Microsoft Lync that could allow remote code execution if a user views shared content that contains specially crafted TrueType fonts.INTRODUCTIONMicrosoft has released security bulletin MS12-039. To view the complete security bulletin, go to one of the following Microso...
CVE-2012-1849: Undefined Security Weakness
Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading...
CVE-2012-1858: Exposure of Sensitive Information to an Unauthorized Actor
The toStaticHTML API aka the SafeHTML component in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting XSS attacks via a crafted...
On the Up and Up
It just keeps getting bigger – with all the news about stealthy cyber attacks on U.S. corporations and the government, it should be no surprise that both Black Hat and DEFCON had record attendance again this year. Among the notables: organizers at DEFCON running through their allotment of 10,000...
Cisco Live Attendee List Hacked
Someone hacked the list of attendees for the recent Cisco Live 2010 users’ conference, a security breach that led Cisco to notify the customers as well as a broader group who have dealings with the company. Read the full article. Network World...
SEC Consult SA-20051211-0 :: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook
SEC Consult Security Advisory 20051211-0 ========================================================================== title: Several XSS issues in Horde Framework, Kronolith Calendar, Mnemo Notes, Nag Tasks and Turba Addressbook program: Horde Application Framework + Modules vulnerable version:...
Microsoft Teams help & learning
None None...
Security update 1970-01-01
...
Update for Lync 2010 Attendee - Administrator level installation (KB 2500438)
This package fixes the issues described in KB 2500438...