Title

Multiple Vulnerabilities in Skype for Business and Microsoft Lync Server (MS15-104) (Cat I impact)

Discussion

Microsoft has released a security bulletin addressing multiple vulnerabilities in Skype for Business and Lync servers. Skype is a capability that allows users to interact in a multi-media environment. To exploit these vulnerabilities, an attacker would entice a user to open a malicious web link via email sent or hosted webpage. If successfully exploited, the attacker would execute arbitrary code and compromise the affected system.

Check Content

Fix Text

Additional Identifiers

Rule ID:

Vulnerability ID: V-61375

Group Title:

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.