PT-2007-6916 · Microsoft · Skype

Publicado 2007-12-13 · Atualizado 2018-10-15 · CVE-2007-5989

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Skype versions prior to 3.6 GOLD

Description The issue allows remote attackers to execute arbitrary code via short string values that result in heap corruption.

Recommendations For versions prior to 3.6 GOLD, update to version 3.6 GOLD or later to resolve the issue.

Correção

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-5989

Produtos afetados

Skype

Referências · 11

• http://secunia.com/advisories/27934 · Aviso do Fabricante
• http://zerodayinitiative.com/advisories/ZDI-07-070.html · Nota
• http://securityfocus.com/bid/26748 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-5989 · Nota de Segurança
• http://securityfocus.com/archive/1/archive/1/484703/100/0/threaded · Nota
• http://securityfocus.com/archive/1/484703/100/0/threaded · Nota
• http://securityreason.com/securityalert/3440 · Nota
• http://osvdb.org/39170 · Nota
• http://vupen.com/english/advisories/2007/4110 · Nota
• http://frsirt.com/english/advisories/2007/4110 · Nota
• http://securitytracker.com/id?1019056 · Nota