CVE-2017-0129

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Microsoft Lync for Mac 2011 fails to properly validate certificates, allowing remote attackers to alter server-client communications, aka "Microsoft Lync for Mac Certificate Validation Vulnerability."

Metrics

CVSS 3.0 7.5/10CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-295

Affected software

VendorProductVersions
Microsoft CorporationLync for MacLync for Mac 2011

References

Timeline

Published
Mar 17, 2017
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2017

CVE-2017-01307.5The scripting engine in Microsoft Internet Explorer 9 through 11 allows remote attackers to execute arbitrary code or cause a denial of servCVE-2017-01317.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01327.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01337.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01347.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01354.2Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuCVE-2017-01367.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01377.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01387.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01404.2Microsoft Edge allows remote attackers to bypass the Same Origin Policy for HTML elements in other browser windows, aka "Microsoft Edge SecuCVE-2017-01417.5A remote code execution vulnerability exists in the way affected Microsoft scripting engines render when handling objects in memory in MicroCVE-2017-01438.8The SMBv1 server in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1; Windows 8.1; Windows Server 2012 Gold an
CVE-2017-0129: High severity, CVSS 7.5 | Vulnix