CVE:CVE-2010-3136
CNNVD:CNNVD-201008-317
Skype是使用最新P2P技术提供高质量语音通讯和即时消息的免费软件。
Skype 4.2.0.169及之前的版本中存在非信任搜索路径漏洞。本地用户和远程攻击者可以借助与.skype文件位于同一个文件夹下的wab32.dll木马执行任意代码和DLL劫持攻击。
solution:Upgrade skype skype to a higher version than 4.2.0.169,0.90.0.5:beta,0.90.0.10:beta,0.91.0.2:beta,0.92.0.4:beta,0.93.0.18:beta,0.93.1.1:beta,0.94.0.19:beta,0.94.0.28:beta,0.95.0.11:beta,0.95.0.25:beta,0.95.0.36:beta,0.95.0.40:beta,0.96.0.1:beta,0.96.0.3:beta,0.97.0.1:beta,0.97.0.3:beta,0.97.0.6:beta,0.97.0.40:beta,0.98.0.04:beta,0.98.0.6:beta,0.98.0.28:beta,0.98.0.42:beta,0.98.0.68:beta,1.0.0.9,1.0.0.10,1.0.0.18,1.0.0.29,1.0.0.94,1.0.0.97,1.0.0.100,1.0.0.106,1.1.0.6,1.1.0.73,1.1.0.79,1.2.0.37,1.2.0.41,1.2.0.48,1.3.0.45,1.3.0.48,1.3.0.51,1.3.0.54,1.3.0.55,1.3.0.57,1.3.0.60,1.3.0.66,1.4.0.71,1.4.0.78,1.4.0.84,2.0.0.69,2.0.0.73,2.0.0.79,2.0.0.81,2.0.0.90,2.0.0.97,2.0.0.103,2.0.0.105,2.0.0.107,2.5.0.72,2.5.0.82,2.5.0.91,2.5.0.113,2.5.0.122,2.5.0.126,2.5.0.130,2.5.0.137,2.5.0.141,2.5.0.151,2.5.0.154,2.6.0.67:beta,2.6.0.74:beta,2.6.0.81:beta,2.6.0.97:beta,2.6.0.103:beta,2.6.0.105:beta,3.0.0.106:beta,3.0.0.123:beta,3.0.0.137:beta,3.0.0.154:beta,3.0.0.190,3.0.0.198,3.0.0.205,3.0.0.209,3.0.0.214,3.0.0.216,3.0.0.217,3.0.0.218,3.1.0.112:beta,3.1.0.134:beta,3.1.0.144,3.1.0.147,3.1.0.150,3.1.0.152,3.2.0.53:beta,3.2.0.63:beta,3.2.0.82:beta,3.2.0.115:beta,3.2.0.145,3.2.0.148,3.2.0.152,3.2.0.158,3.2.0.163,3.2.0.175,3.5.0.107:beta,3.5.0.158:beta,3.5.0.178,3.5.0.202,3.5.0.214,3.5.0.229,3.5.0.234,3.5.0.239,3.6.0.127:beta,3.6.0.159:beta,3.6.0.216,3.6.0.244,3.6.0.248,3.8.0.96:beta,3.8.0.115,3.8.0.139,3.8.0.144,3.8.0.154,3.8.0.180,3.8.0.188,4.0:beta_3,4.0.0.145:beta,4.0.0.150:beta,4.0.0.155:beta_1,4.0.0.161:beta,4.0.0.166:beta_2,4.0.0.168:beta_2,4.0.0.169:beta_2,4.0.0.176:beta_3,4.0.0.181:beta_3,4.0.0.206,4.0.0.215,4.0.0.216,4.0.0.224,4.0.0.226,4.0.0.227,4.1.0.130,4.1.0.130:beta,4.1.0.136,4.1.0.141,4.1.0.166,4.1.0.179,4.2.0.141:beta,4.2.0.152,4.2.0.155,4.2.0.158,4.2.0.163,4.2.0.166,and avoid the version (,4.2.0.169],0.90.0.5:beta,0.90.0.10:beta,0.91.0.2:beta,0.92.0.4:beta,0.93.0.18:beta,0.93.1.1:beta,0.94.0.19:beta,0.94.0.28:beta,0.95.0.11:beta,0.95.0.25:beta,0.95.0.36:beta,0.95.0.40:beta,0.96.0.1:beta,0.96.0.3:beta,0.97.0.1:beta,0.97.0.3:beta,0.97.0.6:beta,0.97.0.40:beta,0.98.0.04:beta,0.98.0.6:beta,0.98.0.28:beta,0.98.0.42:beta,0.98.0.68:beta,1.0.0.9,1.0.0.10,1.0.0.18,1.0.0.29,1.0.0.94,1.0.0.97,1.0.0.100,1.0.0.106,1.1.0.6,1.1.0.73,1.1.0.79,1.2.0.37,1.2.0.41,1.2.0.48,1.3.0.45,1.3.0.48,1.3.0.51,1.3.0.54,1.3.0.55,1.3.0.57,1.3.0.60,1.3.0.66,1.4.0.71,1.4.0.78,1.4.0.84,2.0.0.69,2.0.0.73,2.0.0.79,2.0.0.81,2.0.0.90,2.0.0.97,2.0.0.103,2.0.0.105,2.0.0.107,2.5.0.72,2.5.0.82,2.5.0.91,2.5.0.113,2.5.0.122,2.5.0.126,2.5.0.130,2.5.0.137,2.5.0.141,2.5.0.151,2.5.0.154,2.6.0.67:beta,2.6.0.74:beta,2.6.0.81:beta,2.6.0.97:beta,2.6.0.103:beta,2.6.0.105:beta,3.0.0.106:beta,3.0.0.123:beta,3.0.0.137:beta,3.0.0.154:beta,3.0.0.190,3.0.0.198,3.0.0.205,3.0.0.209,3.0.0.214,3.0.0.216,3.0.0.217,3.0.0.218,3.1.0.112:beta,3.1.0.134:beta,3.1.0.144,3.1.0.147,3.1.0.150,3.1.0.152,3.2.0.53:beta,3.2.0.63:beta,3.2.0.82:beta,3.2.0.115:beta,3.2.0.145,3.2.0.148,3.2.0.152,3.2.0.158,3.2.0.163,3.2.0.175,3.5.0.107:beta,3.5.0.158:beta,3.5.0.178,3.5.0.202,3.5.0.214,3.5.0.229,3.5.0.234,3.5.0.239,3.6.0.127:beta,3.6.0.159:beta,3.6.0.216,3.6.0.244,3.6.0.248,3.8.0.96:beta,3.8.0.115,3.8.0.139,3.8.0.144,3.8.0.154,3.8.0.180,3.8.0.188,4.0:beta_3,4.0.0.145:beta,4.0.0.150:beta,4.0.0.155:beta_1,4.0.0.161:beta,4.0.0.166:beta_2,4.0.0.168:beta_2,4.0.0.169:beta_2,4.0.0.176:beta_3,4.0.0.181:beta_3,4.0.0.206,4.0.0.215,4.0.0.216,4.0.0.224,4.0.0.226,4.0.0.227,4.1.0.130,4.1.0.130:beta,4.1.0.136,4.1.0.141,4.1.0.166,4.1.0.179,4.2.0.141:beta,4.2.0.152,4.2.0.155,4.2.0.158,4.2.0.163,4.2.0.166