Multiple vulnerabilities in Microsoft Lync Server

Description

Multiple serious vulnerabilities have been found in Microsoft Lync Server. Malicious users can exploit these vulnerabilities to inject arbitrary code or cause denial of service.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via a specially designed URL;
2. Improper exceptions handling can be exploited remotely via a specially designed call;
3. An unknown vulnerability can be exploited remotely via a specially designed request.

Original advisories

• CVE-2014-4071

• CVE-2014-4070
• CVE-2014-1823
• CVE-2014-4068

Related products

• Microsoft-Lync-Server

CVE list

• CVE-2014-4071
  critical
• CVE-2014-4070
  warning
• CVE-2014-1823
  warning
• CVE-2014-4068
  critical

KB list

• 2992965
• 2963286
• 2990928
• 2963288
• 2969258
• 2982388
• 2982389
• 2986072
• 2982385
• 2982390

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com