CVE-2017-8550

A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remote Code Execution Vulnerability".

Score

CVSS 3.0 5.4 Medium

Status

Modified - secure@microsoft.com

Published

2017-06-15

Last modified

2024-08-05

Weaknesses

CWE-79

Affected products

• Office (Microsoft)
• Skype For Business (Microsoft Corporation)

References

• http://www.securityfocus.com/bid/98916
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550
• https://www.exploit-db.com/exploits/42316/