(MS12-039) Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)
Gravedad: High
CVE Identifier: CVE-2011-3402,CVE-2012-0159,CVE-2012-1849,CVE-2012-1858
Fecha recomendada: 13 de junio de 2012
Descripción
This update resolves several vulnerabilities found in versions of Microsoft Lync. It corrects vulnerabilities existing in the handling of TrueType fonts, loading of external library files, and sanitizing HTML content by a specific function in Lync.
Soluciones
Software y versión afectados
- Microsoft Communicator 2007 R2
- Microsoft Lync 2010 (32-bit)
- Microsoft Lync 2010 (64-bit)
- Microsoft Lync 2010 Attendee
- Microsoft Lync 2010 Attendant (32-bit)
- Microsoft Lync 2010 Attendant (64-bit)