CVE-2018-8311

EPSS 35.11%
Veröffentlicht 11.07.2018 00:29:02
Zuletzt bearbeitet 21.11.2024 04:13:35
Quelle secure@microsoft.com
CVE-Watchlists
Login
Unerledigt
Login

A remote code execution vulnerability exists when Skype for Business and Microsoft Lync clients fail to properly sanitize specially crafted content, aka "Remote Code Execution Vulnerability in Skype For Business and Lync." This affects Skype, Microsoft Lync.

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Lync Version- Updatesp1

Microsoft ≫ Skype For Business Version-

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	35.11%	0.969

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	8.8	2.8	5.9	CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
nvd@nist.gov	6.8	8.6	6.4	AV:N/AC:M/Au:N/C:P/I:P/A:P

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://www.securityfocus.com/bid/104624

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041259

Third Party Advisory

VDB Entry

http://www.securitytracker.com/id/1041260

Third Party Advisory

VDB Entry

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8311

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2018-8311

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2018-8311

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2018-8311

EUVD