PT-2007-6916 · Microsoft · Skype

Published 2007-12-13 · Updated 2018-10-15 · CVE-2007-5989

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Skype versions prior to 3.6 GOLD

Description The issue allows remote attackers to execute arbitrary code via short string values that result in heap corruption.

Recommendations For versions prior to 3.6 GOLD, update to version 3.6 GOLD or later to resolve the issue.

Fix

RCE

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-5989

Affected Products

Skype

References · 11

• http://secunia.com/advisories/27934 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-5989 · Security Note
• http://zerodayinitiative.com/advisories/ZDI-07-070.html · Note
• http://securityfocus.com/bid/26748 · Note
• http://securityfocus.com/archive/1/archive/1/484703/100/0/threaded · Note
• http://securityfocus.com/archive/1/484703/100/0/threaded · Note
• http://securityreason.com/securityalert/3440 · Note
• http://osvdb.org/39170 · Note
• http://vupen.com/english/advisories/2007/4110 · Note
• http://frsirt.com/english/advisories/2007/4110 · Note
• http://securitytracker.com/id?1019056 · Note