Multiple ACE vulnerabilities in Microsoft Skype

Description

Multiple untrusted search path vulnerabilities was found in Microsoft Skype. Malicious users can exploit this vulnerability to execute arbitrary code.

---

Technical details

This vulnerability is related to Microsoft Skype installer. This vulnerability had been reported to Microsoft but they decided not to fix it.

Original advisories

• skype installer dll hijacking vulnerability

• Triaging a DLL planting vulnerability

Related products

• Skype-for-Windows

CVE list

• CVE-2016-5720
  high
• CVE-2017-6517
  critical
• CVE-2018-0594
  high
• CVE-2018-0595
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com