CVE-2014-4071

CVE-2014-4071 concerns a remote denial of service vulnerability in Microsoft Lync Server 2013 caused by a NULL pointer dereference when processing crafted requests, leading to a daemon hang. The vulnerability is described as part of a set of issues affecting Microsoft Lync Server 2010/2013, with ...

KLA10609 Multiple vulnerabilities in Microsoft Lync Server

Multiple serious vulnerabilities have been found in Microsoft Lync Server. Malicious users can exploit these vulnerabilities to inject arbitrary code or cause denial of service. Below is a complete list of vulnerabilities 1. XSS vulnerability can be exploited remotely via a specially designed URL...