PT-2017-1606 · Microsoft · Skype+1

Sachin Wagh + 1 · Published 2017-03-23 · Updated 2019-10-03 · CVE-2017-6517

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Microsoft Skype version 7.16.0.102

Description The issue exists due to the way .dll files are loaded by Skype, allowing an unauthenticated, remote attacker to execute arbitrary code on the targeted system. The specific flaw is within the handling of DLL loading by the Skype.exe process, particularly with the api-ms-win-core-winrt-string-l1-1-0.dll. An attacker can exploit this by loading a specially crafted .dll file, potentially executing arbitrary code without the user's knowledge.

Recommendations For Microsoft Skype version 7.16.0.102, consider restricting the loading of external libraries to prevent exploitation until a patch is available. As a temporary workaround, avoid using the Skype.exe process to load .dll files from untrusted sources, especially the api-ms-win-core-winrt-string-l1-1-0.dll, to minimize the risk of arbitrary code execution.

Exploit

Fix

Uncontrolled Search Path Element

Weakness Enumeration

CWE-427

CWE-264

Related Identifiers

BDU:2017-00751

CVE-2017-6517

Affected Products

Skype

Api-Ms-Win-Core-Winrt-String-L1-1-0.Dll

References · 10

• 🔥 http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-6517 · Security Note
• https://osv.dev/vulnerability/CVE-2017-6517 · Vendor Advisory
• https://bdu.fstec.ru/vul/2017-00751 · Security Note
• https://twitter.com/vysecurity/status/845013670103003138 · Note
• https://technet.microsoft.com/security/cc308575.aspx · Note
• http://securityfocus.com/bid/96969 · Note
• http://seclists.org/fulldisclosure/2017/Mar/44 · Note
• https://twitter.com/tiger_tigerboy/status/755332687141883904 · Note
• http://securitytracker.com/id/1038209 · Note