Multiple ACE vulnerabilities in Microsoft Skype

Описание

Multiple untrusted search path vulnerabilities was found in Microsoft Skype. Malicious users can exploit this vulnerability to execute arbitrary code.

---

Technical details

This vulnerability is related to Microsoft Skype installer. This vulnerability had been reported to Microsoft but they decided not to fix it.

Первичный источник обнаружения

• skype installer dll hijacking vulnerability
  Triaging a DLL planting vulnerability
  

Эксплуатация

Public exploits exist for this vulnerability.

Список CVE

• CVE-2016-5720
  critical
• CVE-2017-6517
  critical
• CVE-2018-0594
  critical
• CVE-2018-0595
  critical

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com