CVE-2018-8311 A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype F...
HighCVSS 8.8
EPSS 16.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft lync | All versions | No fix listed |
| Microsoft skype for business | All versions | No fix listed |
| Microsoft skype | = Business 2016 (32-bit) | No fix listed |
| Microsoft skype | = Business 2016 (64-bit) | No fix listed |
| Microsoft Lync | = 2013 Service Pack 1 (32-bit) | No fix listed |
| Microsoft Lync | = 2013 Service Pack 1 (64-bit) | No fix listed |
References
- 104624 third-party-advisory vdb-entry
- 1041259 third-party-advisory vdb-entry
- 1041260 third-party-advisory vdb-entry
- portal.msrc.microsoft.com vendor-advisory