CVE-2017-6517

Microsoft Skype 7.16.0.102 contains a vulnerability that could allow an unauthenticated, remote attacker to execute arbitrary code on the targeted system. This vulnerability exists due to the way .dll files are loaded by Skype. It allows an attacker to load a .dll of the attacker's choosing that could execute arbitrary code without the user's knowledge.The specific flaw exists within the handling of DLL (api-ms-win-core-winrt-string-l1-1-0.dll) loading by the Skype.exe process.

• CWE-427

• http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.htmlExploit, Third Party Advisory, US Government Resource
• http://seclists.org/fulldisclosure/2017/Mar/44Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96969Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038209
• https://technet.microsoft.com/security/cc308575.aspxNot Applicable
• https://twitter.com/tiger_tigerboy/status/755332687141883904Press/Media Coverage
• https://twitter.com/vysecurity/status/845013670103003138Press/Media Coverage
• http://packetstormsecurity.com/files/141650/Skype-7.16.0.102-DLL-Hijacking.htmlExploit, Third Party Advisory, US Government Resource
• http://seclists.org/fulldisclosure/2017/Mar/44Mailing List, Third Party Advisory
• http://www.securityfocus.com/bid/96969Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1038209
• https://technet.microsoft.com/security/cc308575.aspxNot Applicable
• https://twitter.com/tiger_tigerboy/status/755332687141883904Press/Media Coverage
• https://twitter.com/vysecurity/status/845013670103003138Press/Media Coverage

Published

Mar 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-6510Easy File Sharing FTP Server version 3.6 is vulnerable to a …
• CVE-2017-6511andrzuk/FineCMS before 2017-03-06 is vulnerable to a reflect…6.1
• CVE-2017-6512Race condition in the rmtree and remove_tree functions in th…5.9
• CVE-2017-6513The WHMCS Reseller Module V2 2.0.2 in Softaculous Virtualizo…
• CVE-2017-6514WordPress 4.7.2 mishandles listings of post authors, which a…
• CVE-2017-6516A Local Privilege Escalation Vulnerability in MagniComp's Sy…
• CVE-2017-6518Cross-site scripting (XSS) vulnerability in /sanadata/seo/in…
• CVE-2017-6519avahi-daemon in Avahi through 0.6.32 and 0.7 inadvertently r…9.1
• CVE-2017-6520The Multicast DNS (mDNS) responder used in BOSE Soundtouch 3…
• CVE-2017-6526An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLI…
• CVE-2017-6527An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLI…
• CVE-2017-6528An issue was discovered in dnaTools dnaLIMS 4-2015s13. dnaLI…