Multiple ACE vulnerabilities in Microsoft Skype

Descrição

Multiple untrusted search path vulnerabilities was found in Microsoft Skype. Malicious users can exploit this vulnerability to execute arbitrary code.

---

Technical details

This vulnerability is related to Microsoft Skype installer. This vulnerability had been reported to Microsoft but they decided not to fix it.

Comunicados originais

• skype installer dll hijacking vulnerability

• Triaging a DLL planting vulnerability

Exploração

Public exploits exist for this vulnerability.

Produtos relacionados

• Skype-for-Windows

Lista de CVE

• CVE-2016-5720
  critical
• CVE-2017-6517
  critical
• CVE-2018-0594
  critical
• CVE-2018-0595
  critical

Saiba mais

Descubra as estatísticas das vulnerabilidades que se espalham em sua região statistics.securelist.com