Lucene search

[email protected]CVE-2017-8550

HistoryJun 15, 2017 - 1:29 a.m.

CVE-2017-8550

2017-06-1501:29:04

CWE-79

[email protected]

web.nvd.nist.gov

cve

2017

8550

skype for business

remote code execution

vulnerability

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

5.4 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:C/C:L/I:L/A:N

5.9 Medium

AI Score

Confidence

High

0.272 Low

EPSS

Percentile

96.8%

JSON

A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka “Skype for Business Remote Code Execution Vulnerability”.

Affected configurations

Vulners

NVD

Node

microsoft_corporationskype_for_business

CPENameOperatorVersion
microsoft:officemicrosoft officeeq2016

CPE	Name	Operator	Version
microsoft:office	microsoft office	eq	2016

CNA Affected

[
  {
    "product": "Skype for Business",
    "vendor": "Microsoft Corporation",
    "versions": [
      {
        "status": "affected",
        "version": "Microsoft Office 2016 Click-to-Run (C2R)"
      }
    ]
  }
]