PT-2018-18505 · Microsoft · Skype For Business+2

Steven Thompson · Publicado 2018-07-11 · Atualizado 2019-10-03 · CVE-2018-8238

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Skype for Business (affected versions not specified) Microsoft Lync (affected versions not specified)

Description A security feature bypass issue exists due to improper parsing of UNC path links shared via messages. This issue affects Skype and Microsoft Lync products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

CVE-2018-8238

Produtos afetados

Lync

Skype

Skype For Business

Referências · 4

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2018-8238 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8238 · Nota de Segurança
• http://securityfocus.com/bid/104619 · Nota