Microsoft Graphics Component Memory Corruption Vulnerability

概要

参考情報

• blogs.mcafee.com/mcafee-labs/mcafee-labs-detects-zero-day-exploit-targeting-microsoft-office-2 · Broken Link
• blogs.technet.com/b/srd/archive/2013/11/05/cve-2013-3906-a-graphics-vulnerability-exploited-through-word-documents.aspx · Broken Link
• technet.microsoft.com/security/advisory/2896666 · Patch
• exploit-db.com/exploits/30011 · Exploit
• docs.microsoft.com/en-us/security-updates/securitybulletins/2013/ms13-096 · Patch
• cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
• CISA KEV · CVE-2013-3906

lync のその他の脆弱性

• CVE-2020-1025緊急 9.8An elevation of privilege vulnerability exists when Microsoft SharePoint Server and Skype for Business Server improperly handle OAuth token …
• CVE-2019-1209中 6.5An information disclosure vulnerability exists in Lync 2013, aka 'Lync 2013 Information Disclosure Vulnerability'.
• CVE-2019-1084中 6.5An information disclosure vulnerability exists when Exchange allows creation of entities with Display Names having non-printable characters.…
• CVE-2018-8546中 5.9A denial of service vulnerability exists in Skype for Business, aka "Microsoft Skype for Business Denial of Service Vulnerability." This aff…
• CVE-2018-8238高 7.8A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka…