Test ID:	1.3.6.1.4.1.25623.1.0.809881
Category:	General
Title:	Microsoft Skype DLL Hijacking Vulnerability
Summary:	Microsoft Skype is prone to a DLL hijacking vulnerability.
Description:	Summary: Microsoft Skype is prone to a DLL hijacking vulnerability. Vulnerability Insight: The flaw exists due to Skype looks for a specific DLL by dynamically going through a set of predefined directories. One of the directory being scanned is the installation directory, and this is exactly what is abused in this vulnerability. Vulnerability Impact: Successful exploitation of this vulnerability will allow remote attackers to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse. Affected Software/OS: Microsoft Skype prior to 7.30.80.103. Solution: Upgrade to Microsoft skype Version 7.30.80.103 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-5720 BugTraq ID: 95859 http://www.securityfocus.com/bid/95859 http://seclists.org/fulldisclosure/2016/Sep/65
Copyright	Copyright (C) 2017 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.