PT-2018-18505 · Microsoft · Skype For Business+2

Steven Thompson · Published 2018-07-11 · Updated 2019-10-03 · CVE-2018-8238

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Skype for Business (affected versions not specified) Microsoft Lync (affected versions not specified)

Description A security feature bypass issue exists due to improper parsing of UNC path links shared via messages. This issue affects Skype and Microsoft Lync products.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2018-8238

Affected Products

Lync

Skype

Skype For Business

References · 4

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8238 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-8238 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8238 · Security Note
• http://securityfocus.com/bid/104619 · Note