Multiple ACE vulnerabilities in Microsoft Skype

Beschreibung

Multiple untrusted search path vulnerabilities was found in Microsoft Skype. Malicious users can exploit this vulnerability to execute arbitrary code.

---

Technical details

This vulnerability is related to Microsoft Skype installer. This vulnerability had been reported to Microsoft but they decided not to fix it.

Ursprüngliche Informationshinweise

• skype installer dll hijacking vulnerability

• Triaging a DLL planting vulnerability

Ausnutzung

Public exploits exist for this vulnerability.

Betroffene Produkte

• Skype-for-Windows

CVE Liste

• CVE-2016-5720
  critical
• CVE-2017-6517
  critical
• CVE-2018-0594
  critical
• CVE-2018-0595
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com