CVE-2017-6517: Critical severity Microsoft Skype vulnerability

Published Mar 23, 2017

Updated

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.The specific flaw exists within the handling of DLL (api-ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process.

Affected Software

1 affected component

Microsoft Skype=7.16.0.102

Event History

Mar 23, 2017

CVE Published

via MITRE·08:00 PM

Data Sourced

via MITRE·08:00 PM

Description

Data Sourced

via NVD·08:59 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2017-6517?

CVE-2017-6517 has a high severity rating due to its potential for remote code execution.

How do I fix CVE-2017-6517?

Updating Microsoft Skype to the latest version mitigates the risks associated with CVE-2017-6517.

What systems are affected by CVE-2017-6517?

CVE-2017-6517 specifically affects Microsoft Skype version 7.16.0.102.

Can CVE-2017-6517 be exploited remotely?

Yes, CVE-2017-6517 allows an unauthenticated remote attacker to execute arbitrary code.

What type of vulnerability is CVE-2017-6517?

CVE-2017-6517 is a DLL hijacking vulnerability that affects the loading of .dll files in Skype.