Skype client UDP buffer overflow
| skype-client-udp-bo (22850) |  High Risk |
Description:
Skype is vulnerable to a heap-based buffer overflow. A remote attacker could send a specially-crafted UDP packet to cause a heap-based overflow. A remote attacker could exploit this vulnerability to cause the Skype client to crash and possibly execute arbitrary code on the system. It is also reported that Skype is vulnerable to a specially-crafted TCP packet exploit that also results in execution of arbitrary code.
Platforms Affected:
- Microsoft, Pocket PC
- Skype, Skype for Linux 1.2.*.17 and prior
- Skype, Skype for Mac OS X 1.3.*.16 and prior
- Skype, Skype for Pocket PC 1.1.*.6 and prior
- Skype, Skype for Windows 1.4.x.83 and prior
Remedy:
For Skype for Windows:
Upgrade to the latest version of Skype for Windows (1.4.*.84 or later), available from the Skype Web site. See References.
For Skype for Mac OS X:
Upgrade to the latest version of Skype for Mac OS X (1.3.*.17 or later), available from the Skype Web site. See References.
For Skype for Linux:
Upgrade to the latest version of Skype for Linux (1.2.*.18 or later), available from the Skype Web site. See References.
For Skype for Pocket PC:
Upgrade to the latest version of Skype for Pocket PC (1.1.0.20 or later), available from the Skype Web site. See References.
Consequences:
Gain Access
References:
- Skype Web site, Skype - The whole world can talk for free. at http://www.skype.com/.
- Skype Web site, Download Skype for Windows at http://www.skype.com/products/skype/windows/.
- BID-15192: Skype Technologies Skype Networking Routine Heap Overflow Vulnerability
- CVE-2005-3267: Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.
- OSVDB ID: 20306: Skype Crafted UDP Packet Remote Overflow
- SA17305: Skype Multiple Buffer Overflow Vulnerabilities
- US-CERT VU#905177: Skype vulnerable to heap-based buffer overflow
- VUPEN/ADV-2005-2197: Skype Multiple URI and VCARD Handling Buffer Overflow Vulnerabilities
Reported:
Oct 25, 2005
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net