CVE-2019-0624

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A spoofing vulnerability exists when a Skype for Business 2015 server does not properly sanitize a specially crafted request, aka "Skype for Business 2015 Spoofing Vulnerability." This affects Skype.

Metrics

CVSS 3.0 5.4/10CVSS:3.0/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
Microsoft	Skype	Business Server 2015 CU 8

References

http://www.securityfocus.com/bid/106663Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0624Patch, Vendor Advisory
http://www.securityfocus.com/bid/106663Third Party Advisory
https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2019-0624Patch, Vendor Advisory

Timeline

Published: Jan 17, 2019
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2019

CVE-2019-06257.8A remote code execution vulnerability exists when the Windows Jet Database Engine improperly handles objects in memory, aka 'Jet Database En CVE-2019-06269.8A memory corruption vulnerability exists in the Windows Server DHCP service when an attacker sends specially crafted packets to a DHCP serve CVE-2019-06277.8A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur CVE-2019-06285.5An information disclosure vulnerability exists when the win32k component improperly provides kernel information, aka 'Win32k Information Dis CVE-2019-06308.8A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,CVE-2019-06317.8A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur CVE-2019-06327.8A security feature bypass vulnerability exists in Windows which could allow an attacker to bypass Device Guard, aka 'Windows Security Featur CVE-2019-06338.8A remote code execution vulnerability exists in the way that the Microsoft Server Message Block 2.0 (SMBv2) server handles certain requests,CVE-2019-06347.5A remote code execution vulnerability exists when Microsoft Edge improperly accesses objects in memory, aka 'Microsoft Edge Memory Corruptio CVE-2019-06356.2An information disclosure vulnerability exists when Windows Hyper-V on a host operating system fails to properly validate input from an auth CVE-2019-06365.5An information vulnerability exists when Windows improperly discloses file information, aka 'Windows Information Disclosure Vulnerability'.CVE-2019-06377.5A security feature bypass vulnerability exists when Windows Defender Firewall incorrectly applies firewall profiles to cellular network conn