Multiple ACE vulnerabilities in Microsoft Skype

説明

Multiple untrusted search path vulnerabilities was found in Microsoft Skype. Malicious users can exploit this vulnerability to execute arbitrary code.

---

Technical details

This vulnerability is related to Microsoft Skype installer. This vulnerability had been reported to Microsoft but they decided not to fix it.

オリジナルアドバイザリー

• skype installer dll hijacking vulnerability

• Triaging a DLL planting vulnerability

エクスプロイテーション

Public exploits exist for this vulnerability.

関連製品

• Skype-for-Windows

CVEリスト

• CVE-2016-5720
  critical
• CVE-2017-6517
  critical
• CVE-2018-0594
  critical
• CVE-2018-0595
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com