GCVE - cpe:2.3:a:microsoft:lync:2010:*:*:*:attendee:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:lync:2010:*:*:*:attendee:*:*:*

part: a version: 2010 update: *

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Lync (`bda6cdcb-9e61-50c3-a526-61166ecfbdc8`)
Edition	*
Language	*
Software edition	attendee
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-0073`	vulnerable	2026-06-08 05:08:25.372461	Details available The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "Windows GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062. Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:19.045Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1038002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0073 http://www.securityfocus.com/bid/96637	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-0060`	vulnerable	2026-06-08 05:08:25.352674	Details available The Graphics Device Interface (GDI) in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold and R2; Windows RT 8.1; and Windows 10 Gold, 1511, and 1607 allows remote attackers to obtain sensitive information from process memory via a crafted web site, aka "GDI+ Information Disclosure Vulnerability." This vulnerability is different from those described in CVE-2017-0060 and CVE-2017-0062. Published: 2017-03-17T00:00:00.000Z Updated: 2024-08-05T12:55:18.224Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/96713 https://www.exploit-db.com/exploits/41656/ http://www.securitytracker.com/id/1038002 https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0060	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-6061`	vulnerable	2026-06-08 05:06:51.234844	Details available Cross-site scripting (XSS) vulnerability in Microsoft Skype for Business 2016, Lync 2010 and 2013 SP1, Lync 2010 Attendee, and Lync Room System allows remote attackers to inject arbitrary web script or HTML via an instant-message session, aka "Server Input Validation Information Disclosure Vulnerability." Published: 2015-11-11T11:00:00.000Z Updated: 2024-08-06T07:06:35.210Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1034126 http://www.securitytracker.com/id/1034127 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-123	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2464`	vulnerable	2026-06-08 05:06:35.061339	Details available Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2463. Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:27.003Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 http://www.securitytracker.com/id/1033238 http://www.securityfocus.com/bid/76240 https://www.exploit-db.com/exploits/37914/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2463`	vulnerable	2026-06-08 05:06:35.059821	Details available Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT Gold and 8.1, Office 2007 SP3 and 2010 SP2, Live Meeting 2007 Console, Lync 2010, Lync 2010 Attendee, Lync 2013 SP1, Lync Basic 2013 SP1, Silverlight before 5.1.40728, and .NET Framework 3.0 SP2, 3.5, 3.5.1, 4, 4.5, 4.5.1, 4.5.2, and 4.6 allow remote attackers to execute arbitrary code via a crafted TrueType font, aka "TrueType Font Parsing Vulnerability," a different vulnerability than CVE-2015-2464. Published: 2015-08-15T00:00:00.000Z Updated: 2024-08-06T05:17:26.521Z Open on db.gcve.eu Reference links https://docs.microsoft.com/en-us/security-updates/securitybulletins/2015/ms15-080 http://www.securitytracker.com/id/1033238 http://www.securityfocus.com/bid/76239 https://www.exploit-db.com/exploits/37915/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2456`	vulnerable	2026-06-08 05:06:35.055153	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2455`	vulnerable	2026-06-08 05:06:35.053959	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2435`	vulnerable	2026-06-08 05:06:35.040575	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2431`	vulnerable	2026-06-08 05:06:35.025311	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-1671`	vulnerable	2026-06-08 05:06:26.043778	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2013-3906`	vulnerable	2026-06-08 05:04:33.168919	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.