Microsoft Office Communicator 2007 R2
Approved changes feed: RSS · Atom
cpe:2.3:a:microsoft:office_communicator:2007:r2:*:*:*:*:*:*
part: a version: 2007 update: r2
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Office Communicator (d4fb900c-f5ec-5407-81ce-5a930c4ef7d9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-1302 |
vulnerable | 2026-06-08 05:03:53.341081 |
Details available
Microsoft Communicator 2007 R2, Lync 2010, Lync 2010 Attendee, and Lync Server 2013 do not properly handle objects in memory, which allows remote attackers to execute arbitrary code via an invitation that triggers access to a deleted object, aka "Lync RCE Vulnerability."
Published: 2013-05-15T01:00:00.000Z
Updated: 2024-08-06T14:57:05.078Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2520 |
vulnerable | 2026-06-08 05:02:04.744179 |
Details available
Cross-site scripting (XSS) vulnerability in Microsoft InfoPath 2007 SP2 and SP3 and 2010 SP1, Communicator 2007 R2, Lync 2010 and 2010 Attendee, SharePoint Server 2007 SP2 and SP3 and 2010 SP1, Groove Server 2010 SP1, Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010 SP1, and Office Web Apps 2010 SP1 allows remote attackers to inject arbitrary web script or HTML via a crafted string, aka "HTML Sanitization Vulnerability."
Published: 2012-10-09T21:00:00.000Z
Updated: 2024-08-06T19:34:25.841Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-1858 |
vulnerable | 2026-06-08 05:00:51.174933 |
Details available
The toStaticHTML API (aka the SafeHTML component) in Microsoft Internet Explorer 8 and 9, Communicator 2007 R2, and Lync 2010 and 2010 Attendee does not properly handle event attributes and script, which makes it easier for remote attackers to conduct cross-site scripting (XSS) attacks via a crafted HTML document, aka "HTML Sanitization Vulnerability."
Published: 2012-06-12T22:00:00.000Z
Updated: 2024-08-06T19:08:38.504Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.