PT-2018-18549 · Microsoft · Skype For Business+1

Published 2018-07-11 · Updated 2018-09-10 · CVE-2018-8311

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Skype for Business and Microsoft Lync (affected versions not specified)

Description A remote code execution issue exists due to the failure of Skype for Business and Microsoft Lync clients to properly sanitize specially crafted content.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2018-8311

Affected Products

Lync

Skype For Business

References · 5

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-8311 · Security Note
• http://securitytracker.com/id/1041259 · Note
• http://securityfocus.com/bid/104624 · Note
• http://securitytracker.com/id/1041260 · Note