Multiple ACE vulnerabilities in Microsoft Skype

Descripción

Multiple untrusted search path vulnerabilities was found in Microsoft Skype. Malicious users can exploit this vulnerability to execute arbitrary code.

---

Technical details

This vulnerability is related to Microsoft Skype installer. This vulnerability had been reported to Microsoft but they decided not to fix it.

Notas informativas originales

• skype installer dll hijacking vulnerability

• Triaging a DLL planting vulnerability

Explotación

Public exploits exist for this vulnerability.

Productos relacionados

• Skype-for-Windows

Lista CVE

• CVE-2016-5720
  critical
• CVE-2017-6517
  critical
• CVE-2018-0594
  critical
• CVE-2018-0595
  critical

Leer más

Conozca las estadísticas de las vulnerabilidades que se propagan en su región statistics.securelist.com