CVEvulnerability
CVE-2014-4068
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2014-09-10
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."
Affected configurations
• microsoft lync server 2010
• microsoft lync server 2013
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://blogs.technet.com/b/srd/archive/2014/09/09/assessing-risk-for-the-september-2014-security-updates.aspx blogs.technet.com
- http://www.securityfocus.com/bid/69586 www.securityfocus.com
- http://www.securitytracker.com/id/1030821 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-055 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95544 exchange.xforce.ibmcloud.com
- http://blogs.technet.com/b/srd/archive/2014/09/09/assessing-risk-for-the-september-2014-security-updates.aspx blogs.technet.com
- http://www.securityfocus.com/bid/69586 www.securityfocus.com
- http://www.securitytracker.com/id/1030821 www.securitytracker.com
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-055 docs.microsoft.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/95544 exchange.xforce.ibmcloud.com