10
CVSSv2

CVE-2017-6517

Published: 23/03/2017 Updated: 03/10/2019
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 890
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote malicious user to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an malicious user to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.The specific flaw exists within the handling of DLL (api-ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft skype 7.16.0.102

Exploits

Skype version 7160102 suffers from a dll hijacking vulnerability ...