CVE-2010-3136

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.

• skype skype (<= 4.2.0.169) • skype skype 0.90.0.5 • skype skype 0.90.0.10 • skype skype 0.91.0.2 • skype skype 0.92.0.4 • skype skype 0.93.0.18 • skype skype 0.93.1.1 • skype skype 0.94.0.19 • skype skype 0.94.0.28 • skype skype 0.95.0.11 • skype skype 0.95.0.25 • skype skype 0.95.0.36 • skype skype 0.95.0.40 • skype skype 0.96.0.1 • skype skype 0.96.0.3 • skype skype 0.97.0.1 • skype skype 0.97.0.3 • skype skype 0.97.0.6 • skype skype 0.97.0.40 • skype skype 0.98.0.04 • skype skype 0.98.0.6 • skype skype 0.98.0.28 • skype skype 0.98.0.42 • skype skype 0.98.0.68 • skype skype 1.0.0.9 • skype skype 1.0.0.10 • skype skype 1.0.0.18 • skype skype 1.0.0.29 • skype skype 1.0.0.94 • skype skype 1.0.0.97 • skype skype 1.0.0.100 • skype skype 1.0.0.106 • skype skype 1.1.0.6 • skype skype 1.1.0.73 • skype skype 1.1.0.79 • skype skype 1.2.0.37 • skype skype 1.2.0.41 • skype skype 1.2.0.48 • skype skype 1.3.0.45 • skype skype 1.3.0.48 • skype skype 1.3.0.51 • skype skype 1.3.0.54 • skype skype 1.3.0.55 • skype skype 1.3.0.57 • skype skype 1.3.0.60 • skype skype 1.3.0.66 • skype skype 1.4.0.71 • skype skype 1.4.0.78 • skype skype 1.4.0.84 • skype skype 2.0.0.69 • skype skype 2.0.0.73 • skype skype 2.0.0.79 • skype skype 2.0.0.81 • skype skype 2.0.0.90 • skype skype 2.0.0.97 • skype skype 2.0.0.103 • skype skype 2.0.0.105 • skype skype 2.0.0.107 • skype skype 2.5.0.72 • skype skype 2.5.0.82 … and 90 more