• News
  • Science

Microsoft might not fix Skype vulnerability in the immediate future

Microsoft might not fix Skype vulnerability in the immediate future

Security researcher Stefan Kanthak found that the Skype update installer could be exploited with a DLL hijacking technique, which allows an attacker to trick an application into drawing malicious code instead of the correct library. Security researcher has revealed that a potential attacker could exploit the "functionality of the Windows DLL loader where the process loading the DLL searches for the DLL to be loaded first in the same directory in which the process binary resides and then in other directories (e.g., System32)". The bug is applicable on both macOS and Windows desktop platforms. Despite it being a big flaw, Microsoft is reportedly not planning to fix the issue anytime soon. However fixes will be delivered in a new version of the Skype client rather than an update as it is "too much work", to complete the bug fix now, says the source. Skype UWP app is not affected by this vulnerability.

ZDNet explains that Skype has its own built-in updater and when it runs it uses another executable file to run the update, which is vulnerable to the hijacking.

The security expert informed Microsoft of the bug in September, but according to the Seclists' reported timeline of the bug, a fix will instead land in a newer version of the product rather than a dedicated security update. The company was able to reproduce the issue on their own computers. Once trespassed, hackers could potentially copy or delete critical files, install rogue apps, access confidential information, and do pretty much anything possible to the infected system.

The result, if exploited would mean that an ordinary user account would get all the privileges of a SYSTEM user.

"The team is planning on shipping a newer version of the client, and this current version will slowly be deprecated".

With no further action made by Microsoft since, Kanthak published the report on Friday as a warning to Skype users.

Leave Your Comment

Leave Your Comment


Latest News

  • Barnaby Joyce faces Nationals partyroom meeting as concerns grow about his leadership

    Barnaby Joyce faces Nationals partyroom meeting as concerns grow about his leadership

    But according to Ms Devine , Mrs Joyce first "had wind of the affair" around April past year , and the women came face-to-face. If I were her, I'd be starting to feel a bit miffed about all this by now.
    Apple HomePod Tips & Tricks: How To Use HomePod Properly

    Apple HomePod Tips & Tricks: How To Use HomePod Properly

    If the Music app has been uninstalled, something Apple has allowed you to do since iOS 10, this set up process gets stuck. These songs are both largely acoustic, and I'd say that songs from this genre perform particularly well on the HomePod.
    Chipotle names Taco Bell chief executive Brian Niccol as CEO

    Chipotle names Taco Bell chief executive Brian Niccol as CEO

    Chipotle CEO and founder Steve Ells announced a year ago that he would step down in the CEO role and become executive chairman. Niccol was responsible for introducing mobile ordering and payment across Taco Bell's 7,000 locations across the US.
  • United Kingdom  risks Beijing anger by sailing warship into South China Sea

    United Kingdom risks Beijing anger by sailing warship into South China Sea

    The mission saw £9 billion worth of trade deals done - including agreements to export Aston Martins across China. Beijing has continued to extend its borders in the South China Sea in the face of global condemnation.
    Indian police arrest most-wanted terrorist from Nepal border

    Indian police arrest most-wanted terrorist from Nepal border

    Delhi Police claimed at least 165 people were killed and 535 injured in blasts in which Junaid was suspected to be involved. In three years, from 2014 till 2017, he met many IM sympathisers and in 2017, he started coming to India, police said.
    Ravens-Bears to meet in Hall of Fame Game on Aug. 2

    Ravens-Bears to meet in Hall of Fame Game on Aug. 2

    The early exhibition game means the Bears potentially could report to training camp July 18 and begin practicing July 19. He was selected All-Pro five times, voted to eight Pro Bowls and named to the NFL All-Decade Team of the 2000s.
  • Southwest Resumes Chicago Flights After De-Icing Fluid Shortage

    Southwest Resumes Chicago Flights After De-Icing Fluid Shortage

    While a supply of the de-icing liquid arrived early Monday, a "handful of flights" may still be canceled, she said . Orange County fire officials said the decision to evacuate the aircraft was made out of an abundance of caution.
    Everyone Went to Ellen DeGeneres' Star-Studded 60th Birthday Party

    Everyone Went to Ellen DeGeneres' Star-Studded 60th Birthday Party

    It was also during this hot party that Schumer made her ongoing relationship with chef Chris Fischer public knowledge. On Tuesday, DeGeneres joked about the big party on her show, calling Oprah out in the process.
    Qualcomm Snapdragon X24 LTE modem sampling started

    Qualcomm Snapdragon X24 LTE modem sampling started

    That's a lot of jargon, but here's the key takeaway: the X24 can sustain high peak download speeds even on congested networks. In the uplink, the Snapdragon X24 LTE supports Category 20 upload speeds with 3×20 MHz CA and up to 256-QAM.
  • Giants Hiring Mike Shula As Offensive Coordinator

    Giants Hiring Mike Shula As Offensive Coordinator

    The Panthers finished 19th in total offense (323.7 yards per game) and 28th in passing (192.3) during the past regular season. The elder Shula holds the National Football League record for regular season wins and he won two Super Bowls .
    N.Korean delegation's S.Korea visit meaningful: Pyongyang media

    N.Korean delegation's S.Korea visit meaningful: Pyongyang media

    The South Korean president met with a delegation of North Koreans who were in the country for the PyeongChang Winter Olympics . Up the road, however, an elderly husband and wife, each draped in the South Korean flag, denounced Moon as a "fake president".
    Trump Will Not Release Democrat's Rebuttal Memo

    Trump Will Not Release Democrat's Rebuttal Memo

    McGahn II offered the House committee technical assistance by the DOJ to modify the memo to mitigate the national security risks. Now, Democrats want their own commentary-memo published .
  • Flu Deaths Rise As CDC Unsure if We've Hit Peak Season

    Flu Deaths Rise As CDC Unsure if We've Hit Peak Season

    The highest number of deaths were reported in the age group of less than 6 months and then babies between 6 and 23 months of age. More than 500 cases of the flu have been reported through late January with at least two more months of flu season remaining.
    Iceland's bitcoin mines 'could pinch all the power'

    Iceland's bitcoin mines 'could pinch all the power'

    "If all these projects are realised, we won't have enough energy for it", Sigurbergsson tells the BBC . By contrast, he estimated that Iceland's homes use around 700 gigawatt hours every year.
    THQ Nordic Buys Saints Row, Metro, Dead Island Owner, Koch Media

    THQ Nordic Buys Saints Row, Metro, Dead Island Owner, Koch Media

    THQ Nordic's purchase will bring in house all of Koch Media's studios, intellectual properties, and licenses. The original THQ as we knew it declared bankruptcy and liquidated pretty much all its assets in 2013.
  • Facebook launches 'Lists' to personalise status update box

    Facebook launches 'Lists' to personalise status update box

    The rollout of this new feature may only annoy people because users will flood the News Feed with annoying updates. It should be next to other options like Check In, Photo/Video, Tag Event, and Support Nonprofit.
    Iraq seeks Dollars  88.2 bln for reconstruction: minister

    Iraq seeks Dollars 88.2 bln for reconstruction: minister

    Large parts of Iraq's second-largest city, Mosul, are still in ruins, more than six months after it was retaken by the government. It will cost nearly $90bn (£65.1bn) to rebuild war-torn Iraq after three years of bitter fighting with Islamic State (Isis).
    The woman who didn't trust security with her handbag

    The woman who didn't trust security with her handbag

    Cameras in a Chinese airport captured the moment a passenger chucked himself in a large scanner at a security checkpoint. The video shows woman's silhouette inside the machine and her climbing off the machine once the checking was done.

Breaking News



Recommended

Bowman Nabs Daytona Pole

Earnhardt tweeted congratulations to his replacement, who also won a Cup pole while filling in for Earnhardt in 2016. Denny Hamlin will join Bowman on the front row after reaching 195.092 miles per hour during his qualifying run.

Trump budget cuts to Great Lakes Restoration Initiative provoke Congressional outrage

For third time since his inauguration Donald Trump has put the Great Lakes Restoration Initiative in his budgetary crosshairs. People across MI spoke out and took action previous year to stop these cuts, and I know they'll do so again".

BJP releases vision document for upcoming Tripura Assembly Polls

He claimed his party would win the February 18 poll defeating all counteracts and violent means adopted by the Left. He said that the elections were important for the entire country and BJP.

Aldi officially recognised as the nation's favourite supermarket

The news comes amid ongoing industry war which has seen the German discounters pressure performance of UK's "Big Four" grocers. Bringing up the rear on 62% was Sainsbury's which suffered the ignominy of being the worst performing major supermarket brand.

Malaysian newspaper criticized for publishing biased traits of LGBT individuals

The article in Sinar Harian featured bullet points of supposedly distinctive qualities that revealed LGBT people. How the hell does a gay person endanger your life?' The official religion of Malaysia is Islam.

Here's how you can see the Oscar-nominated 'Get Out' for free

The film has four Academy Award nominations: Best Picture, Best Actor, Best Director and Best Original Screenplay. It's almost been one year since Jordan Peele's Get Out was released, and the film continues to make an impact.

Mourners bid farewell to Pakistan's human rights icon Asma Jahangir

As a woman-led organisation, we are indebted to the path that Asma paved for us through Pakistan's first women-run law firm, AGHS. She was the first woman lawyer in Pakistan to have been granted the status of senior advocate by the Supreme Court.

PSG's Unai Emery focuses on Real Madrid a year after painful exit

Neymar has starred for PSG this season, scoring 28 goals in 27 games in all competitions following his arrival from Barcelona . Los Blancos have had a miserable campaign in La Liga , now sitting in fourth place and 17 points behind leaders Barcelona .

I gave $130000 to porn star Stormy Daniels, says Trump lawyer

She also made an appearance on Jimmy Kimmel's show after Trump's state of the union address last month . The White House did not immediately respond to a request for comment late Tuesday night.

India register first-ever ODI Series win in South Africa

Overall, Kohli is placed 16th in the world with South Africa's AB de Villiers just ahead of him with 9515 runs in 226 ODIs. Hashim Amla's 71 and Heinrich Klaasen's 39 were the only takeaways for the hosts, soon after which they collapsed for 201.