Multiple vulnerabilities in Microsoft Lync Server

Описание

Multiple serious vulnerabilities have been found in Microsoft Lync Server. Malicious users can exploit these vulnerabilities to inject arbitrary code or cause denial of service.

Below is a complete list of vulnerabilities

1. XSS vulnerability can be exploited remotely via a specially designed URL;
2. Improper exceptions handling can be exploited remotely via a specially designed call;
3. An unknown vulnerability can be exploited remotely via a specially designed request.

Первичный источник обнаружения

• CVE-2014-4071
  CVE-2014-4070
  CVE-2014-1823
  CVE-2014-4068
  

Связанные продукты

• Microsoft-Lync-Server

Список CVE

• CVE-2014-4071
  critical
• CVE-2014-4070
  warning
• CVE-2014-1823
  warning
• CVE-2014-4068
  critical

Список KB

• 2992965
• 2963286
• 2990928
• 2963288
• 2969258
• 2982388
• 2982389
• 2986072
• 2982385
• 2982390

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com