CVE-2010-3136 Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab...
HighCVSS 9.3
EPSS 6.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skype | <= 4.2.0.169 | No fix listed |
| skype | = 0.90.0.5-beta | No fix listed |
| skype | = 0.90.0.10-beta | No fix listed |
| skype | = 0.91.0.2-beta | No fix listed |
| skype | = 0.92.0.4-beta | No fix listed |
| skype | = 0.93.0.18-beta | No fix listed |
| skype | = 0.93.1.1-beta | No fix listed |
| skype | = 0.94.0.19-beta | No fix listed |
| skype | = 0.94.0.28-beta | No fix listed |
| skype | = 0.95.0.11-beta | No fix listed |
| skype | = 0.95.0.25-beta | No fix listed |
| skype | = 0.95.0.36-beta | No fix listed |
| skype | = 0.95.0.40-beta | No fix listed |
| skype | = 0.96.0.1-beta | No fix listed |
| skype | = 0.96.0.3-beta | No fix listed |
| skype | = 0.97.0.1-beta | No fix listed |
| skype | = 0.97.0.3-beta | No fix listed |
| skype | = 0.97.0.6-beta | No fix listed |
| skype | = 0.97.0.40-beta | No fix listed |
| skype | = 0.98.0.04-beta | No fix listed |
| skype | = 0.98.0.6-beta | No fix listed |
| skype | = 0.98.0.28-beta | No fix listed |
| skype | = 0.98.0.42-beta | No fix listed |
| skype | = 0.98.0.68-beta | No fix listed |
| skype | = 1.0.0.9 | No fix listed |
Show 126 more
| Product | Affected versions | Fixed in |
|---|---|---|
| skype | = 1.0.0.10 | No fix listed |
| skype | = 1.0.0.18 | No fix listed |
| skype | = 1.0.0.29 | No fix listed |
| skype | = 1.0.0.94 | No fix listed |
| skype | = 1.0.0.97 | No fix listed |
| skype | = 1.0.0.100 | No fix listed |
| skype | = 1.0.0.106 | No fix listed |
| skype | = 1.1.0.6 | No fix listed |
| skype | = 1.1.0.73 | No fix listed |
| skype | = 1.1.0.79 | No fix listed |
| skype | = 1.2.0.37 | No fix listed |
| skype | = 1.2.0.41 | No fix listed |
| skype | = 1.2.0.48 | No fix listed |
| skype | = 1.3.0.45 | No fix listed |
| skype | = 1.3.0.48 | No fix listed |
| skype | = 1.3.0.51 | No fix listed |
| skype | = 1.3.0.54 | No fix listed |
| skype | = 1.3.0.55 | No fix listed |
| skype | = 1.3.0.57 | No fix listed |
| skype | = 1.3.0.60 | No fix listed |
| skype | = 1.3.0.66 | No fix listed |
| skype | = 1.4.0.71 | No fix listed |
| skype | = 1.4.0.78 | No fix listed |
| skype | = 1.4.0.84 | No fix listed |
| skype | = 2.0.0.69 | No fix listed |
| skype | = 2.0.0.73 | No fix listed |
| skype | = 2.0.0.79 | No fix listed |
| skype | = 2.0.0.81 | No fix listed |
| skype | = 2.0.0.90 | No fix listed |
| skype | = 2.0.0.97 | No fix listed |
| skype | = 2.0.0.103 | No fix listed |
| skype | = 2.0.0.105 | No fix listed |
| skype | = 2.0.0.107 | No fix listed |
| skype | = 2.5.0.72 | No fix listed |
| skype | = 2.5.0.82 | No fix listed |
| skype | = 2.5.0.91 | No fix listed |
| skype | = 2.5.0.113 | No fix listed |
| skype | = 2.5.0.122 | No fix listed |
| skype | = 2.5.0.126 | No fix listed |
| skype | = 2.5.0.130 | No fix listed |
| skype | = 2.5.0.137 | No fix listed |
| skype | = 2.5.0.141 | No fix listed |
| skype | = 2.5.0.151 | No fix listed |
| skype | = 2.5.0.154 | No fix listed |
| skype | = 2.6.0.67-beta | No fix listed |
| skype | = 2.6.0.74-beta | No fix listed |
| skype | = 2.6.0.81-beta | No fix listed |
| skype | = 2.6.0.97-beta | No fix listed |
| skype | = 2.6.0.103-beta | No fix listed |
| skype | = 2.6.0.105-beta | No fix listed |
| skype | = 3.0.0.106-beta | No fix listed |
| skype | = 3.0.0.123-beta | No fix listed |
| skype | = 3.0.0.137-beta | No fix listed |
| skype | = 3.0.0.154-beta | No fix listed |
| skype | = 3.0.0.190 | No fix listed |
| skype | = 3.0.0.198 | No fix listed |
| skype | = 3.0.0.205 | No fix listed |
| skype | = 3.0.0.209 | No fix listed |
| skype | = 3.0.0.214 | No fix listed |
| skype | = 3.0.0.216 | No fix listed |
| skype | = 3.0.0.217 | No fix listed |
| skype | = 3.0.0.218 | No fix listed |
| skype | = 3.1.0.112-beta | No fix listed |
| skype | = 3.1.0.134-beta | No fix listed |
| skype | = 3.1.0.144 | No fix listed |
| skype | = 3.1.0.147 | No fix listed |
| skype | = 3.1.0.150 | No fix listed |
| skype | = 3.1.0.152 | No fix listed |
| skype | = 3.2.0.53-beta | No fix listed |
| skype | = 3.2.0.63-beta | No fix listed |
| skype | = 3.2.0.82-beta | No fix listed |
| skype | = 3.2.0.115-beta | No fix listed |
| skype | = 3.2.0.145 | No fix listed |
| skype | = 3.2.0.148 | No fix listed |
| skype | = 3.2.0.152 | No fix listed |
| skype | = 3.2.0.158 | No fix listed |
| skype | = 3.2.0.163 | No fix listed |
| skype | = 3.2.0.175 | No fix listed |
| skype | = 3.5.0.107-beta | No fix listed |
| skype | = 3.5.0.158-beta | No fix listed |
| skype | = 3.5.0.178 | No fix listed |
| skype | = 3.5.0.202 | No fix listed |
| skype | = 3.5.0.214 | No fix listed |
| skype | = 3.5.0.229 | No fix listed |
| skype | = 3.5.0.234 | No fix listed |
| skype | = 3.5.0.239 | No fix listed |
| skype | = 3.6.0.127-beta | No fix listed |
| skype | = 3.6.0.159-beta | No fix listed |
| skype | = 3.6.0.216 | No fix listed |
| skype | = 3.6.0.244 | No fix listed |
| skype | = 3.6.0.248 | No fix listed |
| skype | = 3.8.0.96-beta | No fix listed |
| skype | = 3.8.0.115 | No fix listed |
| skype | = 3.8.0.139 | No fix listed |
| skype | = 3.8.0.144 | No fix listed |
| skype | = 3.8.0.154 | No fix listed |
| skype | = 3.8.0.180 | No fix listed |
| skype | = 3.8.0.188 | No fix listed |
| skype | = 4.0-beta_3 | No fix listed |
| skype | = 4.0.0.145-beta | No fix listed |
| skype | = 4.0.0.150-beta | No fix listed |
| skype | = 4.0.0.155-beta_1 | No fix listed |
| skype | = 4.0.0.161-beta | No fix listed |
| skype | = 4.0.0.166-beta_2 | No fix listed |
| skype | = 4.0.0.168-beta_2 | No fix listed |
| skype | = 4.0.0.169-beta_2 | No fix listed |
| skype | = 4.0.0.176-beta_3 | No fix listed |
| skype | = 4.0.0.181-beta_3 | No fix listed |
| skype | = 4.0.0.206 | No fix listed |
| skype | = 4.0.0.215 | No fix listed |
| skype | = 4.0.0.216 | No fix listed |
| skype | = 4.0.0.224 | No fix listed |
| skype | = 4.0.0.226 | No fix listed |
| skype | = 4.0.0.227 | No fix listed |
| skype | = 4.1.0.130 | No fix listed |
| skype | = 4.1.0.130-beta | No fix listed |
| skype | = 4.1.0.136 | No fix listed |
| skype | = 4.1.0.141 | No fix listed |
| skype | = 4.1.0.166 | No fix listed |
| skype | = 4.1.0.179 | No fix listed |
| skype | = 4.2.0.141-beta | No fix listed |
| skype | = 4.2.0.152 | No fix listed |
| skype | = 4.2.0.155 | No fix listed |
| skype | = 4.2.0.158 | No fix listed |
| skype | = 4.2.0.163 | No fix listed |
| skype | = 4.2.0.166 | No fix listed |
References
- 14766 exploit
- skype-dll-code-execution(64577) vdb-entry
- oval:org.mitre.oval:def:11833 signature vdb-entry