PT-2005-4079 · Microsoft+2 · Windows+3

Dcrstic.Ccr · Publicado 2005-10-27 · Atualizado 2017-07-11 · CVE-2005-3267

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Skype versions prior to 1.4.x.84 on Windows Skype versions prior to 1.3.x.17 on Mac OS Skype versions prior to 1.2.x.18 on Linux Skype versions 1.1.x.6 and earlier

Description The issue is caused by an integer overflow that leads to a heap-based buffer overflow when the Skype client processes crafted network data with a large Object Counter value. This can result in a denial of service, causing the client to crash.

Recommendations For Windows versions prior to 1.4.x.84, update to version 1.4.x.84 or later. For Mac OS versions prior to 1.3.x.17, update to version 1.3.x.17 or later. For Linux versions prior to 1.2.x.18, update to version 1.2.x.18 or later. For versions 1.1.x.6 and earlier, update to a version later than 1.1.x.6.

Exploit

Correção

DoS

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2005-3267

Produtos afetados

Linux

Apple Macos

Skype

Windows

Referências · 13

• 🔥 http://securityfocus.com/bid/15192 · Exploit
• http://securityreason.com/securityalert/115 · Nota
• http://xforce.iss.net/xforce/xfdb/22850 · Nota
• http://skype.com/security/skype-sb-2005-03.html · Aviso do Fabricante
• http://kb.cert.org/vuls/id/905177 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-3267 · Nota de Segurança
• http://osvdb.org/20306 · Nota
• http://marc.info/?l=bugtraq&m=113026202728568&w=2 · Nota
• http://vupen.com/english/advisories/2005/2197 · Aviso do Fabricante
• http://marc.theaimsgroup.com/?l=bugtraq&m=113026202728568&w=2 · Nota
• http://secunia.com/advisories/17305 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22850 · Nota
• http://frsirt.com/english/advisories/2005/2197 · Nota