CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Vulnerability Details : CVE-2010-3136 (1 public exploit)

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.
Publish Date : 2010-08-26 Last Update Date : 2011-07-18
Search Twitter   Search YouTube   Search Google

- CVSS Scores & Vulnerability Types

CVSS Score
9.3
Confidentiality Impact Complete (There is total information disclosure, resulting in all system files being revealed.)
Integrity Impact Complete (There is a total compromise of system integrity. There is a complete loss of system protection, resulting in the entire system being compromised.)
Availability Impact Complete (There is a total shutdown of the affected resource. The attacker can render the resource completely unavailable.)
Access Complexity Medium (The access conditions are somewhat specialized. Some preconditions must be satistified to exploit)
Authentication Not required (Authentication is not required to exploit the vulnerability.)
Gained Access None
Vulnerability Type(s) Execute Code
CWE ID CWE id is not defined for this vulnerability

- Related OVAL Definitions

Title Definition Id Class Family
Untrusted search path vulnerability in Skype version less than or equal to 4.2.0.169 oval:org.mitre.oval:def:11833 windows
OVAL (Open Vulnerability and Assessment Language) definitions define exactly what should be done to verify a vulnerability or a missing patch. Check out the OVAL definitions if you want to learn what you should do to verify a vulnerability.

- Products Affected By CVE-2010-3136

# Product Type Vendor Product Version Update Edition Language
1 Application Skype Skype 0.90.0.5 Beta Version Details Vulnerabilities
2 Application Skype Skype 0.90.0.10 Beta Version Details Vulnerabilities
3 Application Skype Skype 0.91.0.2 Beta Version Details Vulnerabilities
4 Application Skype Skype 0.92.0.4 Beta Version Details Vulnerabilities
5 Application Skype Skype 0.93.0.18 Beta Version Details Vulnerabilities
6 Application Skype Skype 0.93.1.1 Beta Version Details Vulnerabilities
7 Application Skype Skype 0.94.0.19 Beta Version Details Vulnerabilities
8 Application Skype Skype 0.94.0.28 Beta Version Details Vulnerabilities
9 Application Skype Skype 0.95.0.11 Beta Version Details Vulnerabilities
10 Application Skype Skype 0.95.0.25 Beta Version Details Vulnerabilities
11 Application Skype Skype 0.95.0.36 Beta Version Details Vulnerabilities
12 Application Skype Skype 0.95.0.40 Beta Version Details Vulnerabilities
13 Application Skype Skype 0.96.0.1 Beta Version Details Vulnerabilities
14 Application Skype Skype 0.96.0.3 Beta Version Details Vulnerabilities
15 Application Skype Skype 0.97.0.1 Beta Version Details Vulnerabilities
16 Application Skype Skype 0.97.0.3 Beta Version Details Vulnerabilities
17 Application Skype Skype 0.97.0.6 Beta Version Details Vulnerabilities
18 Application Skype Skype 0.97.0.40 Beta Version Details Vulnerabilities
19 Application Skype Skype 0.98.0.04 Beta Version Details Vulnerabilities
20 Application Skype Skype 0.98.0.6 Beta Version Details Vulnerabilities
21 Application Skype Skype 0.98.0.28 Beta Version Details Vulnerabilities
22 Application Skype Skype 0.98.0.42 Beta Version Details Vulnerabilities
23 Application Skype Skype 0.98.0.68 Beta Version Details Vulnerabilities
24 Application Skype Skype 1.0.0.9 Version Details Vulnerabilities
25 Application Skype Skype 1.0.0.10 Version Details Vulnerabilities
26 Application Skype Skype 1.0.0.18 Version Details Vulnerabilities
27 Application Skype Skype 1.0.0.29 Version Details Vulnerabilities
28 Application Skype Skype 1.0.0.94 Version Details Vulnerabilities
29 Application Skype Skype 1.0.0.97 Version Details Vulnerabilities
30 Application Skype Skype 1.0.0.100 Version Details Vulnerabilities
31 Application Skype Skype 1.0.0.106 Version Details Vulnerabilities
32 Application Skype Skype 1.1.0.6 Version Details Vulnerabilities
33 Application Skype Skype 1.1.0.73 Version Details Vulnerabilities
34 Application Skype Skype 1.1.0.79 Version Details Vulnerabilities
35 Application Skype Skype 1.2.0.37 Version Details Vulnerabilities
36 Application Skype Skype 1.2.0.41 Version Details Vulnerabilities
37 Application Skype Skype 1.2.0.48 Version Details Vulnerabilities
38 Application Skype Skype 1.3.0.45 Version Details Vulnerabilities
39 Application Skype Skype 1.3.0.48 Version Details Vulnerabilities
40 Application Skype Skype 1.3.0.51 Version Details Vulnerabilities
41 Application Skype Skype 1.3.0.54 Version Details Vulnerabilities
42 Application Skype Skype 1.3.0.55 Version Details Vulnerabilities
43 Application Skype Skype 1.3.0.57 Version Details Vulnerabilities
44 Application Skype Skype 1.3.0.60 Version Details Vulnerabilities
45 Application Skype Skype 1.3.0.66 Version Details Vulnerabilities
46 Application Skype Skype 1.4.0.71 Version Details Vulnerabilities
47 Application Skype Skype 1.4.0.78 Version Details Vulnerabilities
48 Application Skype Skype 1.4.0.84 Version Details Vulnerabilities
49 Application Skype Skype 2.0.0.69 Version Details Vulnerabilities
50 Application Skype Skype 2.0.0.73 Version Details Vulnerabilities
51 Application Skype Skype 2.0.0.79 Version Details Vulnerabilities
52 Application Skype Skype 2.0.0.81 Version Details Vulnerabilities
53 Application Skype Skype 2.0.0.90 Version Details Vulnerabilities
54 Application Skype Skype 2.0.0.97 Version Details Vulnerabilities
55 Application Skype Skype 2.0.0.103 Version Details Vulnerabilities
56 Application Skype Skype 2.0.0.105 Version Details Vulnerabilities
57 Application Skype Skype 2.0.0.107 Version Details Vulnerabilities
58 Application Skype Skype 2.5.0.72 Version Details Vulnerabilities
59 Application Skype Skype 2.5.0.82 Version Details Vulnerabilities
60 Application Skype Skype 2.5.0.91 Version Details Vulnerabilities
61 Application Skype Skype 2.5.0.113 Version Details Vulnerabilities
62 Application Skype Skype 2.5.0.122 Version Details Vulnerabilities
63 Application Skype Skype 2.5.0.126 Version Details Vulnerabilities
64 Application Skype Skype 2.5.0.130 Version Details Vulnerabilities
65 Application Skype Skype 2.5.0.137 Version Details Vulnerabilities
66 Application Skype Skype 2.5.0.141 Version Details Vulnerabilities
67 Application Skype Skype 2.5.0.151 Version Details Vulnerabilities
68 Application Skype Skype 2.5.0.154 Version Details Vulnerabilities
69 Application Skype Skype 2.6.0.67 Beta Version Details Vulnerabilities
70 Application Skype Skype 2.6.0.74 Beta Version Details Vulnerabilities
71 Application Skype Skype 2.6.0.81 Beta Version Details Vulnerabilities
72 Application Skype Skype 2.6.0.97 Beta Version Details Vulnerabilities
73 Application Skype Skype 2.6.0.103 Beta Version Details Vulnerabilities
74 Application Skype Skype 2.6.0.105 Beta Version Details Vulnerabilities
75 Application Skype Skype 3.0.0.106 Beta Version Details Vulnerabilities
76 Application Skype Skype 3.0.0.123 Beta Version Details Vulnerabilities
77 Application Skype Skype 3.0.0.137 Beta Version Details Vulnerabilities
78 Application Skype Skype 3.0.0.154 Beta Version Details Vulnerabilities
79 Application Skype Skype 3.0.0.190 Version Details Vulnerabilities
80 Application Skype Skype 3.0.0.198 Version Details Vulnerabilities
81 Application Skype Skype 3.0.0.205 Version Details Vulnerabilities
82 Application Skype Skype 3.0.0.209 Version Details Vulnerabilities
83 Application Skype Skype 3.0.0.214 Version Details Vulnerabilities
84 Application Skype Skype 3.0.0.216 Version Details Vulnerabilities
85 Application Skype Skype 3.0.0.217 Version Details Vulnerabilities
86 Application Skype Skype 3.0.0.218 Version Details Vulnerabilities
87 Application Skype Skype 3.1.0.112 Beta Version Details Vulnerabilities
88 Application Skype Skype 3.1.0.134 Beta Version Details Vulnerabilities
89 Application Skype Skype 3.1.0.144 Version Details Vulnerabilities
90 Application Skype Skype 3.1.0.147 Version Details Vulnerabilities
91 Application Skype Skype 3.1.0.150 Version Details Vulnerabilities
92 Application Skype Skype 3.1.0.152 Version Details Vulnerabilities
93 Application Skype Skype 3.2.0.53 Beta Version Details Vulnerabilities
94 Application Skype Skype 3.2.0.63 Beta Version Details Vulnerabilities
95 Application Skype Skype 3.2.0.82 Beta Version Details Vulnerabilities
96 Application Skype Skype 3.2.0.115 Beta Version Details Vulnerabilities
97 Application Skype Skype 3.2.0.145 Version Details Vulnerabilities
98 Application Skype Skype 3.2.0.148 Version Details Vulnerabilities
99 Application Skype Skype 3.2.0.152 Version Details Vulnerabilities
100 Application Skype Skype 3.2.0.158 Version Details Vulnerabilities
101 Application Skype Skype 3.2.0.163 Version Details Vulnerabilities
102 Application Skype Skype 3.2.0.175 Version Details Vulnerabilities
103 Application Skype Skype 3.5.0.107 Beta Version Details Vulnerabilities
104 Application Skype Skype 3.5.0.158 Beta Version Details Vulnerabilities
105 Application Skype Skype 3.5.0.178 Version Details Vulnerabilities
106 Application Skype Skype 3.5.0.202 Version Details Vulnerabilities
107 Application Skype Skype 3.5.0.214 Version Details Vulnerabilities
108 Application Skype Skype 3.5.0.229 Version Details Vulnerabilities
109 Application Skype Skype 3.5.0.234 Version Details Vulnerabilities
110 Application Skype Skype 3.5.0.239 Version Details Vulnerabilities
111 Application Skype Skype 3.6.0.127 Beta Version Details Vulnerabilities
112 Application Skype Skype 3.6.0.159 Beta Version Details Vulnerabilities
113 Application Skype Skype 3.6.0.216 Version Details Vulnerabilities
114 Application Skype Skype 3.6.0.244 Version Details Vulnerabilities
115 Application Skype Skype 3.6.0.248 Version Details Vulnerabilities
116 Application Skype Skype 3.8.0.96 Beta Version Details Vulnerabilities
117 Application Skype Skype 3.8.0.115 Version Details Vulnerabilities
118 Application Skype Skype 3.8.0.139 Version Details Vulnerabilities
119 Application Skype Skype 3.8.0.144 Version Details Vulnerabilities
120 Application Skype Skype 3.8.0.154 Version Details Vulnerabilities
121 Application Skype Skype 3.8.0.180 Version Details Vulnerabilities
122 Application Skype Skype 3.8.0.188 Version Details Vulnerabilities
123 Application Skype Skype 4.0 Beta 3 Version Details Vulnerabilities
124 Application Skype Skype 4.0.0.145 Beta Version Details Vulnerabilities
125 Application Skype Skype 4.0.0.150 Beta Version Details Vulnerabilities
126 Application Skype Skype 4.0.0.155 Beta 1 Version Details Vulnerabilities
127 Application Skype Skype 4.0.0.161 Beta Version Details Vulnerabilities
128 Application Skype Skype 4.0.0.166 Beta 2 Version Details Vulnerabilities
129 Application Skype Skype 4.0.0.168 Beta 2 Version Details Vulnerabilities
130 Application Skype Skype 4.0.0.169 Beta 2 Version Details Vulnerabilities
131 Application Skype Skype 4.0.0.176 Beta 3 Version Details Vulnerabilities
132 Application Skype Skype 4.0.0.181 Beta 3 Version Details Vulnerabilities
133 Application Skype Skype 4.0.0.206 Version Details Vulnerabilities
134 Application Skype Skype 4.0.0.215 Version Details Vulnerabilities
135 Application Skype Skype 4.0.0.216 Version Details Vulnerabilities
136 Application Skype Skype 4.0.0.224 Version Details Vulnerabilities
137 Application Skype Skype 4.0.0.226 Version Details Vulnerabilities
138 Application Skype Skype 4.0.0.227 Version Details Vulnerabilities
139 Application Skype Skype 4.1.0.130 Beta Version Details Vulnerabilities
140 Application Skype Skype 4.1.0.130 Version Details Vulnerabilities
141 Application Skype Skype 4.1.0.136 Version Details Vulnerabilities
142 Application Skype Skype 4.1.0.141 Version Details Vulnerabilities
143 Application Skype Skype 4.1.0.166 Version Details Vulnerabilities
144 Application Skype Skype 4.1.0.179 Version Details Vulnerabilities
145 Application Skype Skype 4.2.0.141 Beta Version Details Vulnerabilities
146 Application Skype Skype 4.2.0.152 Version Details Vulnerabilities
147 Application Skype Skype 4.2.0.155 Version Details Vulnerabilities
148 Application Skype Skype 4.2.0.158 Version Details Vulnerabilities
149 Application Skype Skype 4.2.0.163 Version Details Vulnerabilities
150 Application Skype Skype 4.2.0.166 Version Details Vulnerabilities
151 Application Skype Skype 4.2.0.169 Version Details Vulnerabilities

- Number Of Affected Versions By Product

Vendor Product Vulnerable Versions
Skype Skype 151

- References For CVE-2010-3136

Exploit! http://www.exploit-db.com/exploits/14766
EXPLOIT-DB 14766 Skype <= 4.2.0.169 DLL Hijacking Exploit (wab32.dll) Author:Glafkos Charalambous Release Date:2010-08-25 (windows) local
http://xforce.iss.net/xforce/xfdb/64577
XF skype-dll-code-execution(64577)

- Metasploit Modules Related To CVE-2010-3136

There are not any metasploit modules related to this vulnerability (Please visit www.metasploit.com for more information)


CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.