PT-2011-3570 · Microsoft · Skype

Gordon Maddern · Published 2011-05-10 · Updated 2011-05-26 · CVE-2011-2074

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:M/Au:S/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Skype versions prior to 5.1.0.922

Description The issue allows remote authenticated users to execute arbitrary code or cause a denial of service, resulting in an application crash, via a crafted message.

Recommendations For versions prior to 5.1.0.922, update to version 5.1.0.922 or later to resolve the issue.

Fix

Related Identifiers

CVE-2011-2074

Affected Products

Skype

References · 8

• http://vupen.com/english/advisories/2011/1192 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-2074 · Security Note
• http://blogs.skype.com/security/2011/05/security_vulnerability_in_mac.html · Patch
• http://secunia.com/advisories/44522 · Vendor Advisory
• http://theregister.co.uk/2011/05/06/skype_for_mac_critical_vulnerability · Note
• http://securityfocus.com/bid/47747 · Note
• http://purehacking.com/blogs/gordon-maddern/skype-0day-vulnerabilitiy-discovered-by-pure-hacking · Note
• http://isc.sans.edu/diary.html?storyid=10837 · Note