CVE-2014-4068
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
0
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
The Response Group Service in Microsoft Lync Server 2010 and 2013 and the Core Components in Lync Server 2013 do not properly handle exceptions, which allows remote attackers to cause a denial of service (daemon hang) via a crafted call, aka "Lync Denial of Service Vulnerability."
Response Group Service en Microsoft Lync Server 2010 y 2013 y Core Components en Lync Server 2013 no manejan debidamente las excepciones, lo que permite a atacantes remotos causar una denegación de servicio (cuelgue del demonio) a través de una llamada manipulada, también conocido como 'vulnerabilidad de denegación de servicio de Lync.'
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2014-06-12 CVE Reserved
- 2014-09-10 CVE Published
- 2024-08-06 CVE Updated
- 2024-10-27 EPSS Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-20: Improper Input Validation
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| http://blogs.technet.com/b/srd/archive/2014/09/09/assessing-risk-for-the-september-2014-security-updates.aspx | X_refsource_confirm | |
| http://www.securityfocus.com/bid/69586 | Vdb Entry | |
| http://www.securitytracker.com/id/1030821 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/95544 | Vdb Entry |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2014/ms14-055 | 2018-10-12 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Microsoft Search vendor "Microsoft" | Lync Server Search vendor "Microsoft" for product "Lync Server" | 2010 Search vendor "Microsoft" for product "Lync Server" and version "2010" | - |
Affected
| ||||||
| Microsoft Search vendor "Microsoft" | Lync Server Search vendor "Microsoft" for product "Lync Server" | 2013 Search vendor "Microsoft" for product "Lync Server" and version "2013" | - |
Affected
| ||||||