CVE-2017-0129: High severity microsoft lync vulnerability

Published Mar 17, 2017

Updated

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."

Affected Software

1 affected component

Microsoft Lync for Mac=2011

Remediation

Patch Available

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-0129

Event History

Mar 17, 2017

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Frequently Asked Questions

What is the severity of CVE-2017-0129?

CVE-2017-0129 is considered a high severity vulnerability due to its potential to allow remote attackers to manipulate communications.

How do I fix CVE-2017-0129?

To fix CVE-2017-0129, update Microsoft Lync for Mac 2011 to the latest version that includes the security patch.

What systems are affected by CVE-2017-0129?

CVE-2017-0129 specifically affects Microsoft Lync for Mac 2011.

What is the main issue presented by CVE-2017-0129?

The main issue with CVE-2017-0129 is the failure to properly validate certificates, leading to a vulnerability in server-client communications.

Can CVE-2017-0129 be exploited remotely?

Yes, CVE-2017-0129 can be exploited remotely by attackers to alter communications between the client and server.