CVE-2013-1302

Опубликовано: 15 мая 2013

Источник: nvd

CVSS2: 9.3

EPSS Средний

Описание

Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."

Ссылки

http://www.us-cert.gov/ncas/alerts/TA13-134A
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-041
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15952
http://www.us-cert.gov/ncas/alerts/TA13-134A
Third Party Advisory
US Government Resource
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-041
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15952

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:lync:2010:*:attendee:*:*:*:*:*

cpe:2.3:a:microsoft:lync:2010:*:x64:*:*:*:*:*

cpe:2.3:a:microsoft:lync:2010:*:x86:*:*:*:*:*

cpe:2.3:a:microsoft:lync_server:2013:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:office_communicator:2007:r2:*:*:*:*:*:*

EPSS

Процентиль: 97%

0.44406

Средний

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-q433-fx96-3j76

github

больше 3 лет назад