CVE-2018-8238 A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulner...
HighCVSS 7.8
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A security feature bypass vulnerability exists when Skype for Business or Lync do not properly parse UNC path links shared via messages, aka "Skype for Business and Lync Security Feature Bypass Vulnerability." This affects Skype, Microsoft Lync.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft lync | = 2013-sp1 | No fix listed |
| Microsoft skype for business | = 2016 | No fix listed |
| Microsoft skype | = Business 2016 (32-bit) | No fix listed |
| Microsoft skype | = Business 2016 (64-bit) | No fix listed |
| Microsoft Lync | = 2013 Service Pack 1 (32-bit) | No fix listed |
| Microsoft Lync | = 2013 Service Pack 1 (64-bit) | No fix listed |
References
- 104619 third-party-advisory vdb-entry
- portal.msrc.microsoft.com patch vendor-advisory