Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2017-0129

Опубликовано: 14 мар. 2017
Источник: msrc
EPSS Низкий

Описание

Microsoft Lync for Mac Certificate Validation Vulnerability

A security feature bypass exists when the Lync for Mac 2011 client fails to properly validate certificates. An attacker who successfully exploited this vulnerability could tamper with trusted communications between the server and target client.

To exploit the vulnerability, an attacker would need to intercept and tamper with network traffic.

The security update addresses the vulnerability by correcting how the Lync for Mac 2011 client validates certificates.

Обновления

ПродуктСтатьяОбновление
Microsoft Lync for Mac 2011

Показывать по

Возможность эксплуатации

Publicly Disclosed

No

Exploited

No

Latest Software Release

N/A

Older Software Release

Exploitation Unlikely

DOS

N/A

EPSS

Процентиль: 82%
0.01738
Низкий

Связанные уязвимости

CVSS3: 7.5
nvd
больше 8 лет назад

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."

CVSS3: 7.5
github
около 3 лет назад

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."

EPSS

Процентиль: 82%
0.01738
Низкий