CVE:CVE-2018-8311
CNNVD:CNNVD-201807-841
Microsoft Lync和Skype for Business都是美国微软（Microsoft）公司产品。Microsoft Lync（前称Microsoft Office Communicator）是发布的新一代企业整合沟通平台。Skype for Business是一套企业整合沟通平台。
Microsoft Lync 2013 SP1和Skype for Business 2016中存在远程代码执行漏洞，该漏洞源于程序没有正确的过滤特制的内容。远程攻击者可利用该漏洞在当前用户的上下文中执行任意代码，损坏内存。
solution:Upgrade microsoft lync to a higher version than -:sp1,and avoid the version -:sp1; Upgrade microsoft skype_for_business to a higher version than -