What’s Vulnerable › Vulnerabilities
CVE-2017-9948
- Severity: high (CVSS 8.8 v3.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 6.4% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2017-06-26 · updated 2026-06-17
- Weakness: CWE-119
Description
A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content within the message box.
Affected products
- Microsoft Skype: 7.2, 7.35, 7.36
References
- http://www.securityfocus.com/bid/99281
- https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735
- https://www.vulnerability-lab.com/get_content.php?id=2071
- https://www.vulnerability-lab.com/get_content.php?id=2084
- http://www.securityfocus.com/bid/99281
- https://www.vulnerability-db.com/?q=articles/2017/05/28/stack-buffer-overflow-zero-day-vulnerability-uncovered-microsoft-skype-v72-v735
- https://www.vulnerability-lab.com/get_content.php?id=2071
- https://www.vulnerability-lab.com/get_content.php?id=2084
Get alerted when CVE-2017-9948 or the next vulnerability affects your stack