PT-2011-3570 · Microsoft · Skype

Gordon Maddern · Publicado 2011-05-10 · Atualizado 2011-05-26 · CVE-2011-2074

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Skype versions prior to 5.1.0.922

Description The issue allows remote authenticated users to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted message.

Recommendations For versions prior to 5.1.0.922, update to version 5.1.0.922 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2011-2074

Produtos afetados

Skype

Referências · 8

• http://vupen.com/english/advisories/2011/1192 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2011-2074 · Nota de Segurança
• http://theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability · Nota
• http://securityfocus.com/bid/47747 · Nota
• http://purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking · Nota
• http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html · Correção
• http://secunia.com/advisories/44522 · Aviso do Fabricante
• http://isc.sans.edu/diary.html?storyid=10837 · Nota