Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2019-1029— Skype for Business and Lync Server Denial of Service Vulnerability

EPSS 14.39% · P94
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2019-1029

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Skype for Business and Lync Server Denial of Service Vulnerability
Source: NVD (National Vulnerability Database)
Vulnerability Description
A denial of service vulnerability exists in Skype for Business. An attacker who successfully exploited the vulnerability could cause Skype for Business to stop responding. Note that the denial of service would not allow an attacker to execute code or to elevate the attacker's user rights. To exploit the vulnerability, an attacker needs to obtain a dial-in link for a vulnerable server and then initiates a series of calls within a short amount of time. The update addresses the vulnerability by correcting the way that Skype for Business server handles objects in memory.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Microsoft Skype for Business 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Microsoft Lync Server(前称Microsoft Office Communicator)是美国微软(Microsoft)公司的一套企业整合沟通平台。该平台能够跨越PC、Web、手机等其他移动设备,将不同的沟通方式集成到一个平台中。Microsoft Skype for Business Server是Microsoft Lync Server的新一代产品。 Microsoft Skype for Business中存在安全漏洞。攻击者可利用该漏洞造成拒绝服务。以下产品及版本受到影响:M
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
MicrosoftMicrosoft Lync Server 2010 0 ~ publication -
MicrosoftMicrosoft Lync Server 2013 0 ~ publication -

II. Public POCs for CVE-2019-1029

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2019-1029

登录查看更多情报信息。

Same Patch Batch · Microsoft · 2019-06-12 · 88 CVEs total

CVE-2019-07228.8 HIGHWindows Hyper-V Remote Code Execution Vulnerability
CVE-2019-08888.8 HIGHActiveX Data Objects (ADO) Remote Code Execution Vulnerability
CVE-2019-10198.5 HIGHMicrosoft Windows Security Feature Bypass Vulnerability
CVE-2019-10657.8 HIGHWindows Kernel Elevation of Privilege Vulnerability
CVE-2019-10227.8 HIGHWindows Audio Service Elevation of Privilege Vulnerability
CVE-2019-09087.8 HIGHJet Database Engine Remote Code Execution Vulnerability
CVE-2019-09737.8 HIGHWindows Installer Elevation of Privilege Vulnerability
CVE-2019-09747.8 HIGHJet Database Engine Remote Code Execution Vulnerability
CVE-2019-09837.8 HIGHWindows Storage Service Elevation of Privilege Vulnerability
CVE-2019-09857.8 HIGHMicrosoft Speech API Remote Code Execution Vulnerability
CVE-2019-09067.8 HIGHJet Database Engine Remote Code Execution Vulnerability
CVE-2019-09057.8 HIGHJet Database Engine Remote Code Execution Vulnerability
CVE-2019-09047.8 HIGHJet Database Engine Remote Code Execution Vulnerability
CVE-2019-10267.8 HIGHWindows Audio Service Elevation of Privilege Vulnerability
CVE-2019-10277.8 HIGHWindows Audio Service Elevation of Privilege Vulnerability
CVE-2019-10287.8 HIGHWindows Audio Service Elevation of Privilege Vulnerability
CVE-2019-10217.8 HIGHWindows Audio Service Elevation of Privilege Vulnerability
CVE-2019-10077.8 HIGHWindows Audio Service Elevation of Privilege Vulnerability
CVE-2019-09987.8 HIGHWindows Storage Service Elevation of Privilege Vulnerability
CVE-2019-10457.8 HIGHWindows Network File System Elevation of Privilege Vulnerability

Showing top 20 of 88 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2019-1029

No comments yet


Leave a comment