PT-2018-18549 · Microsoft · Skype For Business+1

Publicado 2018-07-11 · Atualizado 2018-09-10 · CVE-2018-8311

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Skype for Business and Microsoft Lync (affected versions not specified)

Description A remote code execution issue exists due to the failure of Skype for Business and Microsoft Lync clients to properly sanitize specially crafted content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2018-8311

Produtos afetados

Lync

Skype For Business

Referências · 5

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311 · Aviso do Fabricante
• http://securitytracker.com/id/1041259 · Nota
• http://securityfocus.com/bid/104624 · Nota
• http://securitytracker.com/id/1041260 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-8311 · Nota de Segurança