CVE-2010-3136

Published: Aug 26, 2010Modified: Apr 29, 2026

9.3

Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability: 8.6 / Impact: 10.0

Source: NVD

Description

Untrusted search path vulnerability in Skype 4.2.0.169 and earlier allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse wab32.dll that is located in the same folder as a .skype file.

Affected (151)

Products: Skype: Skype

Skype

1 product

Skype

Configuration A

151 vulnerable

Vulnerable Software	Affected Versions
Skype Skype	Up to 4.2.0.169
Skype Skype	Version 0.90.0.10 beta
Skype Skype	Version 0.90.0.5 beta
Skype Skype	Version 0.91.0.2 beta
Skype Skype	Version 0.92.0.4 beta
Skype Skype	Version 0.93.0.18 beta
Skype Skype	Version 0.93.1.1 beta
Skype Skype	Version 0.94.0.19 beta
Skype Skype	Version 0.94.0.28 beta
Skype Skype	Version 0.95.0.11 beta
Skype Skype	Version 0.95.0.25 beta
Skype Skype	Version 0.95.0.36 beta
Skype Skype	Version 0.95.0.40 beta
Skype Skype	Version 0.96.0.1 beta
Skype Skype	Version 0.96.0.3 beta
Skype Skype	Version 0.97.0.1 beta
Skype Skype	Version 0.97.0.3 beta
Skype Skype	Version 0.97.0.40 beta
Skype Skype	Version 0.97.0.6 beta
Skype Skype	Version 0.98.0.04 beta
Skype Skype	Version 0.98.0.28 beta
Skype Skype	Version 0.98.0.42 beta
Skype Skype	Version 0.98.0.68 beta
Skype Skype	Version 0.98.0.6 beta
Skype Skype	Version 1.0.0.100
Skype Skype	Version 1.0.0.106
Skype Skype	Version 1.0.0.10
Skype Skype	Version 1.0.0.18
Skype Skype	Version 1.0.0.29
Skype Skype	Version 1.0.0.94
Skype Skype	Version 1.0.0.97
Skype Skype	Version 1.0.0.9
Skype Skype	Version 1.1.0.6
Skype Skype	Version 1.1.0.73
Skype Skype	Version 1.1.0.79
Skype Skype	Version 1.2.0.37
Skype Skype	Version 1.2.0.41
Skype Skype	Version 1.2.0.48
Skype Skype	Version 1.3.0.45
Skype Skype	Version 1.3.0.48
Skype Skype	Version 1.3.0.51
Skype Skype	Version 1.3.0.54
Skype Skype	Version 1.3.0.55
Skype Skype	Version 1.3.0.57
Skype Skype	Version 1.3.0.60
Skype Skype	Version 1.3.0.66
Skype Skype	Version 1.4.0.71
Skype Skype	Version 1.4.0.78
Skype Skype	Version 1.4.0.84
Skype Skype	Version 2.0.0.103
Skype Skype	Version 2.0.0.105
Skype Skype	Version 2.0.0.107
Skype Skype	Version 2.0.0.69
Skype Skype	Version 2.0.0.73
Skype Skype	Version 2.0.0.79
Skype Skype	Version 2.0.0.81
Skype Skype	Version 2.0.0.90
Skype Skype	Version 2.0.0.97
Skype Skype	Version 2.5.0.113
Skype Skype	Version 2.5.0.122
Skype Skype	Version 2.5.0.126
Skype Skype	Version 2.5.0.130
Skype Skype	Version 2.5.0.137
Skype Skype	Version 2.5.0.141
Skype Skype	Version 2.5.0.151
Skype Skype	Version 2.5.0.154
Skype Skype	Version 2.5.0.72
Skype Skype	Version 2.5.0.82
Skype Skype	Version 2.5.0.91
Skype Skype	Version 2.6.0.103 beta
Skype Skype	Version 2.6.0.105 beta
Skype Skype	Version 2.6.0.67 beta
Skype Skype	Version 2.6.0.74 beta
Skype Skype	Version 2.6.0.81 beta
Skype Skype	Version 2.6.0.97 beta
Skype Skype	Version 3.0.0.106 beta
Skype Skype	Version 3.0.0.123 beta
Skype Skype	Version 3.0.0.137 beta
Skype Skype	Version 3.0.0.154 beta
Skype Skype	Version 3.0.0.190
Skype Skype	Version 3.0.0.198
Skype Skype	Version 3.0.0.205
Skype Skype	Version 3.0.0.209
Skype Skype	Version 3.0.0.214
Skype Skype	Version 3.0.0.216
Skype Skype	Version 3.0.0.217
Skype Skype	Version 3.0.0.218
Skype Skype	Version 3.1.0.112 beta
Skype Skype	Version 3.1.0.134 beta
Skype Skype	Version 3.1.0.144
Skype Skype	Version 3.1.0.147
Skype Skype	Version 3.1.0.150
Skype Skype	Version 3.1.0.152
Skype Skype	Version 3.2.0.115 beta
Skype Skype	Version 3.2.0.145
Skype Skype	Version 3.2.0.148
Skype Skype	Version 3.2.0.152
Skype Skype	Version 3.2.0.158
Skype Skype	Version 3.2.0.163
Skype Skype	Version 3.2.0.175
Skype Skype	Version 3.2.0.53 beta
Skype Skype	Version 3.2.0.63 beta
Skype Skype	Version 3.2.0.82 beta
Skype Skype	Version 3.5.0.107 beta
Skype Skype	Version 3.5.0.158 beta
Skype Skype	Version 3.5.0.178
Skype Skype	Version 3.5.0.202
Skype Skype	Version 3.5.0.214
Skype Skype	Version 3.5.0.229
Skype Skype	Version 3.5.0.234
Skype Skype	Version 3.5.0.239
Skype Skype	Version 3.6.0.127 beta
Skype Skype	Version 3.6.0.159 beta
Skype Skype	Version 3.6.0.216
Skype Skype	Version 3.6.0.244
Skype Skype	Version 3.6.0.248
Skype Skype	Version 3.8.0.115
Skype Skype	Version 3.8.0.139
Skype Skype	Version 3.8.0.144
Skype Skype	Version 3.8.0.154
Skype Skype	Version 3.8.0.180
Skype Skype	Version 3.8.0.188
Skype Skype	Version 3.8.0.96 beta
Skype Skype	Version 4.0.0.145 beta
Skype Skype	Version 4.0.0.150 beta
Skype Skype	Version 4.0.0.155 beta_1
Skype Skype	Version 4.0.0.161 beta
Skype Skype	Version 4.0.0.166 beta_2
Skype Skype	Version 4.0.0.168 beta_2
Skype Skype	Version 4.0.0.169 beta_2
Skype Skype	Version 4.0.0.176 beta_3
Skype Skype	Version 4.0.0.181 beta_3
Skype Skype	Version 4.0.0.206
Skype Skype	Version 4.0.0.215
Skype Skype	Version 4.0.0.216
Skype Skype	Version 4.0.0.224
Skype Skype	Version 4.0.0.226
Skype Skype	Version 4.0.0.227
Skype Skype	Version 4.0 beta_3
Skype Skype	Version 4.1.0.130
Skype Skype	Version 4.1.0.130 beta
Skype Skype	Version 4.1.0.136
Skype Skype	Version 4.1.0.141
Skype Skype	Version 4.1.0.166
Skype Skype	Version 4.1.0.179
Skype Skype	Version 4.2.0.141 beta
Skype Skype	Version 4.2.0.152
Skype Skype	Version 4.2.0.155
Skype Skype	Version 4.2.0.158
Skype Skype	Version 4.2.0.163
Skype Skype	Version 4.2.0.166

References (6)

http://www.exploit-db.com/exploits/14766

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/64577

Source: cve@mitre.org

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11833

Source: cve@mitre.org

http://www.exploit-db.com/exploits/14766

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/64577

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11833

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.