CVE-2018-8311

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.

Score

CVSS 3.0 8.8 High

Status

Modified - secure@microsoft.com

Published

2018-07-11

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Lync (Microsoft)
• Microsoft Lync (Microsoft)
• Skype (Microsoft)
• Skype For Business (Microsoft)

References

• http://www.securityfocus.com/bid/104624
• http://www.securitytracker.com/id/1041259
• http://www.securitytracker.com/id/1041260
• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311