9.3

CVE-2010-3136

Exploit
Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Skype ≫ Skype Version <= 4.2.0.169
Skype ≫ Skype Version0.90.0.5 Updatebeta
Skype ≫ Skype Version0.90.0.10 Updatebeta
Skype ≫ Skype Version0.91.0.2 Updatebeta
Skype ≫ Skype Version0.92.0.4 Updatebeta
Skype ≫ Skype Version0.93.0.18 Updatebeta
Skype ≫ Skype Version0.93.1.1 Updatebeta
Skype ≫ Skype Version0.94.0.19 Updatebeta
Skype ≫ Skype Version0.94.0.28 Updatebeta
Skype ≫ Skype Version0.95.0.11 Updatebeta
Skype ≫ Skype Version0.95.0.25 Updatebeta
Skype ≫ Skype Version0.95.0.36 Updatebeta
Skype ≫ Skype Version0.95.0.40 Updatebeta
Skype ≫ Skype Version0.96.0.1 Updatebeta
Skype ≫ Skype Version0.96.0.3 Updatebeta
Skype ≫ Skype Version0.97.0.1 Updatebeta
Skype ≫ Skype Version0.97.0.3 Updatebeta
Skype ≫ Skype Version0.97.0.6 Updatebeta
Skype ≫ Skype Version0.97.0.40 Updatebeta
Skype ≫ Skype Version0.98.0.04 Updatebeta
Skype ≫ Skype Version0.98.0.6 Updatebeta
Skype ≫ Skype Version0.98.0.28 Updatebeta
Skype ≫ Skype Version0.98.0.42 Updatebeta
Skype ≫ Skype Version0.98.0.68 Updatebeta
Skype ≫ Skype Version1.0.0.9
Skype ≫ Skype Version1.0.0.10
Skype ≫ Skype Version1.0.0.18
Skype ≫ Skype Version1.0.0.29
Skype ≫ Skype Version1.0.0.94
Skype ≫ Skype Version1.0.0.97
Skype ≫ Skype Version1.0.0.100
Skype ≫ Skype Version1.0.0.106
Skype ≫ Skype Version1.1.0.6
Skype ≫ Skype Version1.1.0.73
Skype ≫ Skype Version1.1.0.79
Skype ≫ Skype Version1.2.0.37
Skype ≫ Skype Version1.2.0.41
Skype ≫ Skype Version1.2.0.48
Skype ≫ Skype Version1.3.0.45
Skype ≫ Skype Version1.3.0.48
Skype ≫ Skype Version1.3.0.51
Skype ≫ Skype Version1.3.0.54
Skype ≫ Skype Version1.3.0.55
Skype ≫ Skype Version1.3.0.57
Skype ≫ Skype Version1.3.0.60
Skype ≫ Skype Version1.3.0.66
Skype ≫ Skype Version1.4.0.71
Skype ≫ Skype Version1.4.0.78
Skype ≫ Skype Version1.4.0.84
Skype ≫ Skype Version2.0.0.69
Skype ≫ Skype Version2.0.0.73
Skype ≫ Skype Version2.0.0.79
Skype ≫ Skype Version2.0.0.81
Skype ≫ Skype Version2.0.0.90
Skype ≫ Skype Version2.0.0.97
Skype ≫ Skype Version2.0.0.103
Skype ≫ Skype Version2.0.0.105
Skype ≫ Skype Version2.0.0.107
Skype ≫ Skype Version2.5.0.72
Skype ≫ Skype Version2.5.0.82
Skype ≫ Skype Version2.5.0.91
Skype ≫ Skype Version2.5.0.113
Skype ≫ Skype Version2.5.0.122
Skype ≫ Skype Version2.5.0.126
Skype ≫ Skype Version2.5.0.130
Skype ≫ Skype Version2.5.0.137
Skype ≫ Skype Version2.5.0.141
Skype ≫ Skype Version2.5.0.151
Skype ≫ Skype Version2.5.0.154
Skype ≫ Skype Version2.6.0.67 Updatebeta
Skype ≫ Skype Version2.6.0.74 Updatebeta
Skype ≫ Skype Version2.6.0.81 Updatebeta
Skype ≫ Skype Version2.6.0.97 Updatebeta
Skype ≫ Skype Version2.6.0.103 Updatebeta
Skype ≫ Skype Version2.6.0.105 Updatebeta
Skype ≫ Skype Version3.0.0.106 Updatebeta
Skype ≫ Skype Version3.0.0.123 Updatebeta
Skype ≫ Skype Version3.0.0.137 Updatebeta
Skype ≫ Skype Version3.0.0.154 Updatebeta
Skype ≫ Skype Version3.0.0.190
Skype ≫ Skype Version3.0.0.198
Skype ≫ Skype Version3.0.0.205
Skype ≫ Skype Version3.0.0.209
Skype ≫ Skype Version3.0.0.214
Skype ≫ Skype Version3.0.0.216
Skype ≫ Skype Version3.0.0.217
Skype ≫ Skype Version3.0.0.218
Skype ≫ Skype Version3.1.0.112 Updatebeta
Skype ≫ Skype Version3.1.0.134 Updatebeta
Skype ≫ Skype Version3.1.0.144
Skype ≫ Skype Version3.1.0.147
Skype ≫ Skype Version3.1.0.150
Skype ≫ Skype Version3.1.0.152
Skype ≫ Skype Version3.2.0.53 Updatebeta
Skype ≫ Skype Version3.2.0.63 Updatebeta
Skype ≫ Skype Version3.2.0.82 Updatebeta
Skype ≫ Skype Version3.2.0.115 Updatebeta
Skype ≫ Skype Version3.2.0.145
Skype ≫ Skype Version3.2.0.148
Skype ≫ Skype Version3.2.0.152
Skype ≫ Skype Version3.2.0.158
Skype ≫ Skype Version3.2.0.163
Skype ≫ Skype Version3.2.0.175
Skype ≫ Skype Version3.5.0.107 Updatebeta
Skype ≫ Skype Version3.5.0.158 Updatebeta
Skype ≫ Skype Version3.5.0.178
Skype ≫ Skype Version3.5.0.202
Skype ≫ Skype Version3.5.0.214
Skype ≫ Skype Version3.5.0.229
Skype ≫ Skype Version3.5.0.234
Skype ≫ Skype Version3.5.0.239
Skype ≫ Skype Version3.6.0.127 Updatebeta
Skype ≫ Skype Version3.6.0.159 Updatebeta
Skype ≫ Skype Version3.6.0.216
Skype ≫ Skype Version3.6.0.244
Skype ≫ Skype Version3.6.0.248
Skype ≫ Skype Version3.8.0.96 Updatebeta
Skype ≫ Skype Version3.8.0.115
Skype ≫ Skype Version3.8.0.139
Skype ≫ Skype Version3.8.0.144
Skype ≫ Skype Version3.8.0.154
Skype ≫ Skype Version3.8.0.180
Skype ≫ Skype Version3.8.0.188
Skype ≫ Skype Version4.0 Updatebeta_3
Skype ≫ Skype Version4.0.0.145 Updatebeta
Skype ≫ Skype Version4.0.0.150 Updatebeta
Skype ≫ Skype Version4.0.0.155 Updatebeta_1
Skype ≫ Skype Version4.0.0.161 Updatebeta
Skype ≫ Skype Version4.0.0.166 Updatebeta_2
Skype ≫ Skype Version4.0.0.168 Updatebeta_2
Skype ≫ Skype Version4.0.0.169 Updatebeta_2
Skype ≫ Skype Version4.0.0.176 Updatebeta_3
Skype ≫ Skype Version4.0.0.181 Updatebeta_3
Skype ≫ Skype Version4.0.0.206
Skype ≫ Skype Version4.0.0.215
Skype ≫ Skype Version4.0.0.216
Skype ≫ Skype Version4.0.0.224
Skype ≫ Skype Version4.0.0.226
Skype ≫ Skype Version4.0.0.227
Skype ≫ Skype Version4.1.0.130
Skype ≫ Skype Version4.1.0.130 Updatebeta
Skype ≫ Skype Version4.1.0.136
Skype ≫ Skype Version4.1.0.141
Skype ≫ Skype Version4.1.0.166
Skype ≫ Skype Version4.1.0.179
Skype ≫ Skype Version4.2.0.141 Updatebeta
Skype ≫ Skype Version4.2.0.152
Skype ≫ Skype Version4.2.0.155
Skype ≫ Skype Version4.2.0.158
Skype ≫ Skype Version4.2.0.163
Skype ≫ Skype Version4.2.0.166
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.91% 0.933
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.exploit-db.com/exploits/14766
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/64577
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11833