Skype callto:// URL buffer overflow
| skype-callto-bo (16405) |  High Risk |
Description:
Skype is vulnerable to a buffer overflow. A remote attacker could create a specially-crafted callto:// URL to overflow a buffer and cause the program to crash and possibly execute code on the system, once the link is clicked.
Platforms Affected:
- Microsoft, Pocket PC
- Skype, Skype 0.98.0.04
Remedy:
Upgrade to the latest version of Skype (1.0.0.100 or later), available from the Skype Web site. See References.
Consequences:
Gain Access
References:
- BugTraq Mailing List, Wed Jun 09 2004 - 19:46:45 CDT , Skype URI callto username overflow at http://archives.neohapsis.com/archives/bugtraq/2004-06/0216.html.
- Skype ChangLog Web page, 15.06.2004 Skype for Windows Beta 0.98.0.28 at http://www.skype.com/products/skype/windows/changelog_archive.html.
- Skype Web site, Skype - The whole world can talk for free. at http://www.skype.com/.
- BID-10513: Skype Technologies Skype CallTo URI Handler Buffer Overrun Vulnerability
- CVE-2004-1777: A range check error in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
- SECTRACK ID: 1010490: Skype Error in Processing `callto://` URLs Lets Remote Users Crash the Application
Reported:
Jun 14, 2004
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net