CVE-2017-9948

—

CVSS 3.0

8.8 high

EPSS

6%p93

Published

Jun 26, 2017 (Jun 26, 2017)

Modified

Jun 17, 2026

Description

A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box.

Vendors: microsoft
Products: skype
Weakness: CWE-119
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (6.4%)

In the news2 stories

Experts found a critical remote buffer overflow vulnerability in Skype

Security AffairsJun 28, 19:30 UTC · Jun 28, 2017Vulnerability CVE-2017-9948

Critical Skype Bug Lets Hackers Remotely Execute Malicious Code

The Hacker NewsJun 28, 07:17 UTC · Jun 28, 2017Exploit / PoC CVE-2017-9948