CVE-2014-4068 The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of serv...
MediumCVSS 5.0
EPSS 19.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft lync server | = 2010 | No fix listed |
| Microsoft lync server | = 2013 | No fix listed |
References
- blogs.technet.com
- 69586 vdb-entry
- 1030821 vdb-entry
- MS14-055 vendor-advisory
- ms-lync-cve20144068-dos(95544) vdb-entry