medium5.4Public exploit code
CVE-2017-8550
A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remot…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Skype for Business 2016 - Cross-Site Scripting2017-07-12 · remote · windows
Impact
A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remote Code Execution Vulnerability".
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Office | Version 2016 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/98916
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550
- https://www.exploit-db.com/exploits/42316/
- http://www.securityfocus.com/bid/98916
- https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8550
- https://www.exploit-db.com/exploits/42316/