Description
Untrusted search path vulnerability in Microsoft Lync 2010, 2010 Attendee, and 2010 Attendant allows local users to gain privileges via a Trojan horse DLL in the current working directory, as demonstrated by a directory that contains a .ocsmeet file, aka "Lync Insecure Library Loading Vulnerability."
References
- TA12-164A third-party-advisory
- oval:org.mitre.oval:def:14874 vdb-entry signature
- MS12-039 vendor-advisory