Multiple vulnerabilities in Microsoft Lync Server

Beschreibung

Multiple serious vulnerabilities have been found in Microsoft Lync Server. Malicious users can exploit these vulnerabilities to inject arbitrary code or cause denial of service.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via a specially designed URL;
2. Improper exceptions handling can be exploited remotely via a specially designed call;
3. An unknown vulnerability can be exploited remotely via a specially designed request.

Ursprüngliche Informationshinweise

• CVE-2014-4071

• CVE-2014-4070
• CVE-2014-1823
• CVE-2014-4068

CVE Liste

• CVE-2014-4071
  warning
• CVE-2014-4070
  warning
• CVE-2014-1823
  warning
• CVE-2014-4068
  warning

KB Liste

• 2992965
• 2963286
• 2990928
• 2963288
• 2969258
• 2982388
• 2982389
• 2986072
• 2982385
• 2982390

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com