Severity: : High
  CVE Identifier: CVE-2011-3402,CVE-2012-0159,CVE-2012-1849,CVE-2012-1858
  Advisory Date: 13 de czerwca de 2012

  DESCRIPTION

This update resolves several vulnerabilities found in versions of Microsoft Lync. It corrects vulnerabilities existing in the handling of TrueType fonts, loading of external library files, and sanitizing HTML content by a specific function in Lync.

  SOLUTION

  AFFECTED SOFTWARE AND VERSION:

  • Microsoft Communicator 2007 R2
  • Microsoft Lync 2010 (32-bit)
  • Microsoft Lync 2010 (64-bit)
  • Microsoft Lync 2010 Attendee
  • Microsoft Lync 2010 Attendant (32-bit)
  • Microsoft Lync 2010 Attendant (64-bit)