Vulnerabilities > CVE-2010-3136 - Unspecified vulnerability in Skype

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

skype

exploit available

NVD

Published: 2010-08-26

Updated: 2024-11-21

Summary

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.

Vulnerable Configurations

Part	Description	Count
Application	Skype Skype Skype 3.1.0.134 Skype Skype 2.5.0.154 Skype Skype 3.8.0.154 Skype Skype 0.98.0.6 Skype Skype 0.97.0.3 Skype Skype 4.2.0.166 Skype Skype 3.2.0.145 Skype Skype 3.2.0.158 Skype Skype 1.2.0.41 Skype Skype 4.2.0.158 Skype Skype 1.3.0.57 Skype Skype 3.8.0.96 Skype Skype 3.1.0.144 Skype Skype 1.0.0.94 Skype Skype 4.0.0.226 Skype Skype 0.93.0.18 Skype Skype 0.94.0.28 Skype Skype 4.0.0.227 Skype Skype 0.95.0.11 Skype Skype 0.92.0.4 Skype Skype 1.0.0.9 Skype Skype 1.0.0.97 Skype Skype 3.2.0.82 Skype Skype 3.6.0.127 Skype Skype 1.0.0.18 Skype Skype 2.0.0.105 Skype Skype 3.0.0.154 Skype Skype 1.0.0.29 Skype Skype 1.4.0.84 Skype Skype 0.98.0.68 Skype Skype 2.0.0.81 Skype Skype 2.0.0.103 Skype Skype 2.0.0.90 Skype Skype 1.0.0.106 Skype Skype 2.5.0.130 Skype Skype 3.1.0.152 Skype Skype 3.0.0.106 Skype Skype 0.90.0.5 Skype Skype 3.5.0.158 Skype Skype 4.0.0.166 Skype Skype 1.4.0.71 Skype Skype 3.1.0.112 Skype Skype 1.3.0.54 Skype Skype 4.0.0.215 Skype Skype 3.6.0.248 Skype Skype 3.5.0.214 Skype Skype 3.2.0.53 Skype Skype 0.91.0.2 Skype Skype 3.2.0.115 Skype Skype 0.96.0.1 Skype Skype 1.3.0.48 Skype Skype 3.2.0.148 Skype Skype 2.0.0.107 Skype Skype 1.4.0.78 Skype Skype 1.3.0.66 Skype Skype 1.0.0.10 Skype Skype 3.8.0.115 Skype Skype 3.0.0.205 Skype Skype 4.0.0.150 Skype Skype 1.3.0.51 Skype Skype 4.0.0.181 Skype Skype 1.1.0.79 Skype Skype 4.0 Skype Skype 3.0.0.214 Skype Skype 4.2.0.163 Skype Skype 0.97.0.6 Skype Skype 2.6.0.105 Skype Skype 4.0.0.168 Skype Skype 2.6.0.103 Skype Skype 2.5.0.113 Skype Skype 0.93.1.1 Skype Skype 1.3.0.55 Skype Skype 2.6.0.67 Skype Skype 3.5.0.239 Skype Skype 2.5.0.137 Skype Skype 3.0.0.198 Skype Skype 2.6.0.97 Skype Skype 2.6.0.81 Skype Skype 3.0.0.190 Skype Skype 2.5.0.82 Skype Skype 1.3.0.60 Skype Skype 3.2.0.175 Skype Skype 2.5.0.122 Skype Skype 3.5.0.107 Skype Skype 4.2.0.155 Skype Skype 3.0.0.216 Skype Skype 4.0.0.161 Skype Skype 3.6.0.244 Skype Skype 4.0.0.176 Skype Skype 1.2.0.48 Skype Skype 3.2.0.63 Skype Skype 0.97.0.40 Skype Skype 4.1.0.136 Skype Skype 2.0.0.97 Skype Skype 3.2.0.163 Skype Skype 4.2.0.152 Skype Skype 3.8.0.144 Skype Skype 0.96.0.3 Skype Skype 0.97.0.1 Skype Skype 3.1.0.150 Skype Skype 4.1.0.130 Skype Skype 0.94.0.19 Skype Skype 3.1.0.147 Skype Skype 0.98.0.28 Skype Skype 3.0.0.218 Skype Skype - Skype Skype 0.90.0.10 Skype Skype 0.95.0.25 Skype Skype 0.95.0.36 Skype Skype 0.95.0.40 Skype Skype 0.98.0.04 Skype Skype 0.98.0.42 Skype Skype 1.0.0.100 Skype Skype 1.1.0.6 Skype Skype 1.1.0.73 Skype Skype 1.2.0.37 Skype Skype 1.3.0.45 Skype Skype 2.0.0.69 Skype Skype 2.0.0.73 Skype Skype 2.0.0.79 Skype Skype 2.5.0.72 Skype Skype 2.5.0.91 Skype Skype 2.5.0.126 Skype Skype 2.5.0.141 Skype Skype 2.5.0.151 Skype Skype 2.6.0.74 Skype Skype 3.0.0.123 Skype Skype 3.0.0.137 Skype Skype 3.0.0.209 Skype Skype 3.0.0.217 Skype Skype 3.2.0.152 Skype Skype 3.5.0.178 Skype Skype 3.5.0.202 Skype Skype 3.5.0.229 Skype Skype 3.5.0.234 Skype Skype 3.6.0.159 Skype Skype 3.6.0.216 Skype Skype 3.8.0.139 Skype Skype 3.8.0.180 Skype Skype 3.8.0.188 Skype Skype 4.0.0.145 Skype Skype 4.0.0.155 Skype Skype 4.0.0.169 Skype Skype 4.0.0.206 Skype Skype 4.0.0.216 Skype Skype 4.0.0.224 Skype Skype 4.1.0.141 Skype Skype 4.1.0.166 Skype Skype 4.1.0.179 Skype Skype 4.2.0.141 Skype Skype 4.2.0.169	152

Exploit-Db

description	Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll). CVE-2010-3136. Local exploit for windows platform
file	exploits/windows/local/14766.c
id	EDB-ID:14766
last seen	2016-02-01
modified	2010-08-25
platform	windows
port
published	2010-08-25
reporter	Glafkos Charalambous
source	https://www.exploit-db.com/download/14766/
title	Skype <= 4.2.0.169 DLL Hijacking Exploit wab32.dll
type	local

Oval

accepted

2012-11-19T04:00:05.554-05:00

class

vulnerability

contributors

name SecPod Team
organization SecPod Technologies
name Sergey Artykhov
organization ALTX-SOFT

definition_extensions

comment	Skype is installed
oval	oval:org.mitre.oval:def:11875

description

family

windows

oval:org.mitre.oval:def:11833

status

accepted

submitted

2010-09-09T09:45:46

title

Untrusted search path vulnerability in Skype version less than or equal to 4.2.0.169

version

Summary

Vulnerable Configurations

Exploit-Db

Oval

References