Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2013-1302

EPSS 44.41% · P98
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2013-1302

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Lync RCE漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Lync(前称Microsoft Office Communicator)是美国微软(Microsoft)公司发布的新一代企业整合沟通平台。该平台能够跨越PC、Web、手机等其他移动设备,将不同的沟通方式集成到一个平台中。 当Lync控件尝试访问内存中已被删除的对象时,存在一个远程执行代码漏洞。攻击者可以通过诱使目标用户接受邀请以在Lync或Communicator会话内启动特制内容来利用此漏洞。成功利用此漏洞的攻击者可以获得与当前用户相同的用户权限。以下版本中存在漏洞:Microso
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2013-1302

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2013-1302

Please Login to view more intelligence information

Same Patch Batch · n/a · 2013-05-15 · 31 CVEs total

CVE-2013-1318Microsoft Publisher 损坏界面指针漏洞
CVE-2013-1337Microsoft .NET Framework 身份验证绕过漏洞
CVE-2013-1336Microsoft .NET Framework XML 数字签名欺骗漏洞
CVE-2013-1335Microsoft Word 形状损坏漏洞
CVE-2013-1334Microsoft Windows Win32k 窗口句柄漏洞
CVE-2013-1333Microsoft Windows ‘Win32k’缓冲区溢出漏洞
CVE-2013-1332Microsoft Windows DirectX 图形内核子系统双重提取漏洞
CVE-2013-1329Microsoft Publisher 缓冲区下溢漏洞
CVE-2013-1328Microsoft Publisher 指针处理漏洞
CVE-2013-1327Microsoft Publisher 签名整数漏洞
CVE-2013-1323Microsoft Publisher 不正确的空值处理漏洞
CVE-2013-1322Microsoft Publisher 无效的范围检查漏洞
CVE-2013-1321Microsoft Publisher 返回值验证漏洞
CVE-2013-1320Microsoft Publisher 缓冲区溢出漏洞
CVE-2013-1319Microsoft Publisher 返回值处理漏洞
CVE-2013-1346Microsoft Malware Protection Engine远程代码执行漏洞
CVE-2013-1317Microsoft Publisher 整数溢出漏洞
CVE-2013-1316Microsoft Publisher 负值分配漏洞
CVE-2013-1312Microsoft Internet Explorer 释放后使用漏洞
CVE-2013-1311Microsoft Internet Explorer 释放后使用漏洞

Showing top 20 of 31 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2013-1302

No comments yet


Leave a comment