9.3

CVE-2010-3136

Exploit
Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Skype ≫ Skype Version <= 4.2.0.169
Skype ≫ Skype Version 0.90.0.5 Update beta
Skype ≫ Skype Version 0.90.0.10 Update beta
Skype ≫ Skype Version 0.91.0.2 Update beta
Skype ≫ Skype Version 0.92.0.4 Update beta
Skype ≫ Skype Version 0.93.0.18 Update beta
Skype ≫ Skype Version 0.93.1.1 Update beta
Skype ≫ Skype Version 0.94.0.19 Update beta
Skype ≫ Skype Version 0.94.0.28 Update beta
Skype ≫ Skype Version 0.95.0.11 Update beta
Skype ≫ Skype Version 0.95.0.25 Update beta
Skype ≫ Skype Version 0.95.0.36 Update beta
Skype ≫ Skype Version 0.95.0.40 Update beta
Skype ≫ Skype Version 0.96.0.1 Update beta
Skype ≫ Skype Version 0.96.0.3 Update beta
Skype ≫ Skype Version 0.97.0.1 Update beta
Skype ≫ Skype Version 0.97.0.3 Update beta
Skype ≫ Skype Version 0.97.0.6 Update beta
Skype ≫ Skype Version 0.97.0.40 Update beta
Skype ≫ Skype Version 0.98.0.04 Update beta
Skype ≫ Skype Version 0.98.0.6 Update beta
Skype ≫ Skype Version 0.98.0.28 Update beta
Skype ≫ Skype Version 0.98.0.42 Update beta
Skype ≫ Skype Version 0.98.0.68 Update beta
Skype ≫ Skype Version 1.0.0.9
Skype ≫ Skype Version 1.0.0.10
Skype ≫ Skype Version 1.0.0.18
Skype ≫ Skype Version 1.0.0.29
Skype ≫ Skype Version 1.0.0.94
Skype ≫ Skype Version 1.0.0.97
Skype ≫ Skype Version 1.0.0.100
Skype ≫ Skype Version 1.0.0.106
Skype ≫ Skype Version 1.1.0.6
Skype ≫ Skype Version 1.1.0.73
Skype ≫ Skype Version 1.1.0.79
Skype ≫ Skype Version 1.2.0.37
Skype ≫ Skype Version 1.2.0.41
Skype ≫ Skype Version 1.2.0.48
Skype ≫ Skype Version 1.3.0.45
Skype ≫ Skype Version 1.3.0.48
Skype ≫ Skype Version 1.3.0.51
Skype ≫ Skype Version 1.3.0.54
Skype ≫ Skype Version 1.3.0.55
Skype ≫ Skype Version 1.3.0.57
Skype ≫ Skype Version 1.3.0.60
Skype ≫ Skype Version 1.3.0.66
Skype ≫ Skype Version 1.4.0.71
Skype ≫ Skype Version 1.4.0.78
Skype ≫ Skype Version 1.4.0.84
Skype ≫ Skype Version 2.0.0.69
Skype ≫ Skype Version 2.0.0.73
Skype ≫ Skype Version 2.0.0.79
Skype ≫ Skype Version 2.0.0.81
Skype ≫ Skype Version 2.0.0.90
Skype ≫ Skype Version 2.0.0.97
Skype ≫ Skype Version 2.0.0.103
Skype ≫ Skype Version 2.0.0.105
Skype ≫ Skype Version 2.0.0.107
Skype ≫ Skype Version 2.5.0.72
Skype ≫ Skype Version 2.5.0.82
Skype ≫ Skype Version 2.5.0.91
Skype ≫ Skype Version 2.5.0.113
Skype ≫ Skype Version 2.5.0.122
Skype ≫ Skype Version 2.5.0.126
Skype ≫ Skype Version 2.5.0.130
Skype ≫ Skype Version 2.5.0.137
Skype ≫ Skype Version 2.5.0.141
Skype ≫ Skype Version 2.5.0.151
Skype ≫ Skype Version 2.5.0.154
Skype ≫ Skype Version 2.6.0.67 Update beta
Skype ≫ Skype Version 2.6.0.74 Update beta
Skype ≫ Skype Version 2.6.0.81 Update beta
Skype ≫ Skype Version 2.6.0.97 Update beta
Skype ≫ Skype Version 2.6.0.103 Update beta
Skype ≫ Skype Version 2.6.0.105 Update beta
Skype ≫ Skype Version 3.0.0.106 Update beta
Skype ≫ Skype Version 3.0.0.123 Update beta
Skype ≫ Skype Version 3.0.0.137 Update beta
Skype ≫ Skype Version 3.0.0.154 Update beta
Skype ≫ Skype Version 3.0.0.190
Skype ≫ Skype Version 3.0.0.198
Skype ≫ Skype Version 3.0.0.205
Skype ≫ Skype Version 3.0.0.209
Skype ≫ Skype Version 3.0.0.214
Skype ≫ Skype Version 3.0.0.216
Skype ≫ Skype Version 3.0.0.217
Skype ≫ Skype Version 3.0.0.218
Skype ≫ Skype Version 3.1.0.112 Update beta
Skype ≫ Skype Version 3.1.0.134 Update beta
Skype ≫ Skype Version 3.1.0.144
Skype ≫ Skype Version 3.1.0.147
Skype ≫ Skype Version 3.1.0.150
Skype ≫ Skype Version 3.1.0.152
Skype ≫ Skype Version 3.2.0.53 Update beta
Skype ≫ Skype Version 3.2.0.63 Update beta
Skype ≫ Skype Version 3.2.0.82 Update beta
Skype ≫ Skype Version 3.2.0.115 Update beta
Skype ≫ Skype Version 3.2.0.145
Skype ≫ Skype Version 3.2.0.148
Skype ≫ Skype Version 3.2.0.152
Skype ≫ Skype Version 3.2.0.158
Skype ≫ Skype Version 3.2.0.163
Skype ≫ Skype Version 3.2.0.175
Skype ≫ Skype Version 3.5.0.107 Update beta
Skype ≫ Skype Version 3.5.0.158 Update beta
Skype ≫ Skype Version 3.5.0.178
Skype ≫ Skype Version 3.5.0.202
Skype ≫ Skype Version 3.5.0.214
Skype ≫ Skype Version 3.5.0.229
Skype ≫ Skype Version 3.5.0.234
Skype ≫ Skype Version 3.5.0.239
Skype ≫ Skype Version 3.6.0.127 Update beta
Skype ≫ Skype Version 3.6.0.159 Update beta
Skype ≫ Skype Version 3.6.0.216
Skype ≫ Skype Version 3.6.0.244
Skype ≫ Skype Version 3.6.0.248
Skype ≫ Skype Version 3.8.0.96 Update beta
Skype ≫ Skype Version 3.8.0.115
Skype ≫ Skype Version 3.8.0.139
Skype ≫ Skype Version 3.8.0.144
Skype ≫ Skype Version 3.8.0.154
Skype ≫ Skype Version 3.8.0.180
Skype ≫ Skype Version 3.8.0.188
Skype ≫ Skype Version 4.0 Update beta_3
Skype ≫ Skype Version 4.0.0.145 Update beta
Skype ≫ Skype Version 4.0.0.150 Update beta
Skype ≫ Skype Version 4.0.0.155 Update beta_1
Skype ≫ Skype Version 4.0.0.161 Update beta
Skype ≫ Skype Version 4.0.0.166 Update beta_2
Skype ≫ Skype Version 4.0.0.168 Update beta_2
Skype ≫ Skype Version 4.0.0.169 Update beta_2
Skype ≫ Skype Version 4.0.0.176 Update beta_3
Skype ≫ Skype Version 4.0.0.181 Update beta_3
Skype ≫ Skype Version 4.0.0.206
Skype ≫ Skype Version 4.0.0.215
Skype ≫ Skype Version 4.0.0.216
Skype ≫ Skype Version 4.0.0.224
Skype ≫ Skype Version 4.0.0.226
Skype ≫ Skype Version 4.0.0.227
Skype ≫ Skype Version 4.1.0.130
Skype ≫ Skype Version 4.1.0.130 Update beta
Skype ≫ Skype Version 4.1.0.136
Skype ≫ Skype Version 4.1.0.141
Skype ≫ Skype Version 4.1.0.166
Skype ≫ Skype Version 4.1.0.179
Skype ≫ Skype Version 4.2.0.141 Update beta
Skype ≫ Skype Version 4.2.0.152
Skype ≫ Skype Version 4.2.0.155
Skype ≫ Skype Version 4.2.0.158
Skype ≫ Skype Version 4.2.0.163
Skype ≫ Skype Version 4.2.0.166
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 6.91% 0.933
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.exploit-db.com/exploits/14766
Exploit
https://exchange.xforce.ibmcloud.com/vulnerabilities/64577
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11833