CVE-2018-8474

Description

A security feature bypass vulnerability exists when Lync for Mac 2011 fails to properly sanitize specially crafted messages, aka "Lync for Mac 2011 Security Feature Bypass Vulnerability." This affects Microsoft Lync.

Affected products

• microsoft / Microsoft LyncMac 2011 – Mac 2011

Exploits & proofs of concept

• exploit-dbMicrosoft Lync for Mac 2011 - Injection Forced Browsing/Downloadby nyxgeek

References

• MISChttp://www.securitytracker.com/id/1041633
• MISChttp://www.securityfocus.com/bid/105268
• EXPLOIThttps://www.exploit-db.com/exploits/45936/
• VENDOR_ADVISORYhttps://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8474