Microsoft Lync DLL Loading Error Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1027150 |
|
SecurityTracker URL: http://securitytracker.com/id/1027150
|
|
CVE Reference:
CVE-2012-1849
(Links to External Site)
|
Date: Jun 12 2012
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): 2010
|
Description:
A vulnerability was reported in Microsoft Lync. A remote user may be able to cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted DLL file in a directory or on a remote share (e.g., WebDAV, SMB share). When a file (e.g., '.ocsmeet' file) is loaded by the target user from the same directory, the Lync application may load the remote user's DLL instead of the intended DLL and execute arbitrary code. The code will run with the privileges of the target user.
This type of exploit is also known as "binary planting" or "DLL preloading".
hamburgers maccoy (via Secunia SVCRP) reported this vulnerability.
|
Impact:
A remote user may be able to cause a target application to execute arbitrary code on the target user's system.
|
Solution:
The vendor has issued the following fixes:
Microsoft Communicator 2007 R2:
http://www.microsoft.com/downloads/details.aspx?familyid=75eea324-689a-4892-bdd9-03ef399c4cba
Microsoft Lync 2010 (32-bit):
http://www.microsoft.com/downloads/details.aspx?familyid=425406ea-28b9-46f7-8c49-0c7ea46f16e3
Microsoft Lync 2010 (64-bit):
http://www.microsoft.com/downloads/details.aspx?familyid=06e5285f-1947-4409-b608-e0a145fadba4
Microsoft Lync 2010 Attendee:
http://www.microsoft.com/downloads/details.aspx?familyid=c40f0d38-af90-4966-a0f0-346fa48683d0
Microsoft Lync 2010 Attendant (32-bit):
http://www.microsoft.com/downloads/details.aspx?familyid=fe7ad0f9-ee84-4cda-b252-a8d31ead5053
Microsoft Lync 2010 Attendant (64-bit):
http://www.microsoft.com/downloads/details.aspx?familyid=fe7ad0f9-ee84-4cda-b252-a8d31ead5053
A restart may be required.
The Microsoft advisory is available at:
http://technet.microsoft.com/en-us/security/bulletin/ms12-039
|
Vendor URL: technet.microsoft.com/en-us/security/bulletin/ms12-039 (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
