Lync 2013 Information Disclosure Vulnerability
CVE-2019-1209 is fixed in Microsoft Lync Server 2013 on 1 platform by KB4515509 (version ), released September 10, 2019. It is not reported as exploited. Patch Radar priority: High.
<p>An information disclosure vulnerability exists in Lync 2013. An attacker who exploited it could read arbitrary files on the victim's machine. To exploit the vulnerability, an attacker needs to instantiate a conference and modify the meeting link with malicious content and send the link to a victim.</p> <p>The update addresses the vulnerability by changing how the URL is being resolved.</p>
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Microsoft | |||
| Microsoft Lync Server 2013 | KB4515509 | Sep 10, 2019 | |
Patch Radar data is free to use with attribution. Terms and how to credit it.
Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.