CVE-2016-5720

Multiple untrusted search path vulnerabilities in Microsoft Skype allow local users to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse (1) msi.dll, (2) dpapi.dll, or (3) cryptui.dll that is located in the current working directory.

Score

CVSS 3.0 7.8 High

Status

Modified - cve@mitre.org

Published

2017-01-23

Last modified

2024-08-06

Weaknesses

CWE-264

Affected products

• Skype (Microsoft)

References

• http://seclists.org/fulldisclosure/2016/Sep/65
• http://www.securityfocus.com/bid/95859