(MS12-039) Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)
Schweregrad:: Hoch
CVE Identifier: CVE-2011-3402,CVE-2012-0159,CVE-2012-1849,CVE-2012-1858
Hinweisdatum: 13 Juni 2012
Beschreibung
This update resolves several vulnerabilities found in versions of Microsoft Lync. It corrects vulnerabilities existing in the handling of TrueType fonts, loading of external library files, and sanitizing HTML content by a specific function in Lync.
Lösungen
Betroffene Software und Version:
- Microsoft Communicator 2007 R2
- Microsoft Lync 2010 (32-bit)
- Microsoft Lync 2010 (64-bit)
- Microsoft Lync 2010 Attendee
- Microsoft Lync 2010 Attendant (32-bit)
- Microsoft Lync 2010 Attendant (64-bit)