(MS12-039) Vulnerabilities in Lync Could Allow Remote Code Execution (2707956)

• Email
• Facebook
• 
  Twitter
• Google+
• Linkedin

  Severity: HIGH

  CVE Identifier: CVE-2011-3402,CVE-2012-0159,CVE-2012-1849,CVE-2012-1858

  Advisory Date: JUN 13, 2012

---

  DESCRIPTION

This update resolves several vulnerabilities found in versions of Microsoft Lync. It corrects vulnerabilities existing in the handling of TrueType fonts, loading of external library files, and sanitizing HTML content by a specific function in Lync.

  SOLUTION

  PATCH: http://technet.microsoft.com/en-us/security/bulletin/MS12-039

  AFFECTED SOFTWARE AND VERSION

• Microsoft Communicator 2007 R2
• Microsoft Lync 2010 (32-bit)
• Microsoft Lync 2010 (64-bit)
• Microsoft Lync 2010 Attendee
• Microsoft Lync 2010 Attendant (32-bit)
• Microsoft Lync 2010 Attendant (64-bit)

Related Vulnerability

• June 2012 - Microsoft Releases 7 Security Advisories