CVE

Id
45720  
CVE No.
CVE-2010-3136  
Status
Candidate  
Description
Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.  
Phase
Assigned (20100826)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
497747 45720 CVE-2010-3136 EXPLOIT-DB:14766  View
497748 45720 CVE-2010-3136 URL:http://www.exploit-db.com/exploits/14766  View
497749 45720 CVE-2010-3136 OVAL:oval:org.mitre.oval:def:11833  View
497750 45720 CVE-2010-3136 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:11833  View
497751 45720 CVE-2010-3136 XF:skype-dll-code-execution(64577)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39224 JVNDB-2010-005009 Microsoft Windows Internet Communication Settings における DLL のハイジャック攻撃を実行される脆弱性 Windows 上で稼動する Microsoft Windows Internet Communication Settings は、検索パスに関する処理に不備があるため、任意のコードを実行される、および DLL のハイジャック攻撃を実行される脆弱性が存在します。 CVE-2010-3140 45720 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-005009.html  View