CVE-2017-8550: XSS
Published Jun 15, 2017
·Updated
A remote code execution vulnerability exists in Skype for Business when the software fails to sanitize specially crafted content, aka "Skype for Business Remote Code Execution Vulnerability".
Affected Software
1 affected component
Microsoft Office=2016
Remediation
Event History
Jun 15, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
DescriptionWeakness
Frequently Asked Questions
1
What is the severity of CVE-2017-8550?
CVE-2017-8550 has a critical severity rating due to its potential for remote code execution.
2
How do I fix CVE-2017-8550?
To fix CVE-2017-8550, ensure that you apply the latest security updates provided by Microsoft for Skype for Business.
3
What software versions are affected by CVE-2017-8550?
CVE-2017-8550 specifically affects Microsoft Office 2016, particularly the Click-to-Run version.
4
What type of vulnerability is CVE-2017-8550?
CVE-2017-8550 is classified as a remote code execution vulnerability that arises from improper content sanitation.
5
Can CVE-2017-8550 be exploited remotely?
Yes, CVE-2017-8550 can be exploited remotely, allowing attackers to execute arbitrary code on affected systems.