Critical severity · published Mar 23, 2017
CVE-2017-6517
Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system
9.8
CVSS
46.3%
EPSS
No
On KEV
Description
Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.The specific flaw exists within the handling of DLL (api-ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process.
CVSS vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)46.3% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SK
Skype · Microsoft
7.16.0.102 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6517
Exploit
http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.html
Mailing List
http://seclists.org/fulldisclosure/2017/Mar/44
Third Party Advisory
http://www.securityfocus.com/bid/96969
www.securitytracker.com
http://www.securitytracker.com/id/1038209
Not Applicable
https://technet.microsoft.com/security/cc308575.aspx
Press/Media Coverage
https://twitter.com/tiger_tigerboy/status/755332687141883904
More from Skype
8.8
CVE-2017-9948
A stack buffer overflow vulnerability has been discovered in Microsoft Skype 7.2, 7.35, and 7.36 before 7.37, involving MSFTEDIT.DLL mishandling of remote RDP clipboard content…
7.8
CVE-2018-0595
Untrusted search path vulnerability in the installer of Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory
7.8
CVE-2018-0594
Untrusted search path vulnerability in Skype for Windows allows an attacker to gain privileges via a Trojan horse DLL in an unspecified directory
7.8
CVE-2016-5720
Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) msi.dll, (2)…
5.9
CVE-2019-0932
An information disclosure vulnerability exists in Skype for Android, aka 'Skype for Android Information Disclosure Vulnerability'