Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

Bugtraq ID:	98916
Class:	Input Validation Error
CVE:	CVE-2017-8550
Remote:	Yes
Local:	No
Published:	Jun 13 2017 12:00AM
Updated:	Jun 14 2017 11:03AM
Credit:	Microsoft
Vulnerable:	Microsoft Office 2016 Click-to-Run (C2R) for 64-bit edition 0 - Microsoft Windows NT 4.0 Microsoft Office 2016 Click-to-Run (C2R) for 32-bit edition 0 - Microsoft Windows NT 4.0
Not Vulnerable:

Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

Microsoft Skype for Business and Lync Server are prone to a remote code-execution vulnerability.

Successfully exploiting this issue may result in the execution of arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions.

Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Microsoft Skype for Business and Lync Server CVE-2017-8550 Remote Code Execution Vulnerability

References:

• Microsoft Homepage (Microsoft)
  
• Skype Homepage (Skype Technologies)
  
• CVE-2017-8550 | Skype for Business Remote Code Execution Vulnerability (Microsoft)