(MS14-032) Vulnerability in Microsoft Lync Server Could Allow Information Disclosure (2969258)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2014-1823

  Advisory Date: JUN 11, 2014

---

  DESCRIPTION

This security update addresses a vulnerability found in Microsoft Lync Server that could allow information disclosure, which remote attackers may possibly use to launch other attacks. This can be exploited once users join a supposedly join Lync meeting via clicking specially crafted meeting URL.

  SOLUTION

  PATCH: https://technet.microsoft.com/library/security/ms14-032

  AFFECTED SOFTWARE AND VERSION

• Microsoft Lync Server 2010
• Microsoft Lync Server 2013

Related Vulnerability

• June 2014 - Microsoft Releases 7 Security Advisories