CVEvulnerability
CVE-2007-5989
6.8 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2007-12-13
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-119
Description
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
Affected configurations
• skype technologies skype 0.98.0.04
• skype technologies skype 1.0.0.9
• skype technologies skype 1.0.0.10
• skype technologies skype 1.0.0.18
• skype technologies skype 1.0.0.29
• skype technologies skype 1.0.0.94
• skype technologies skype 1.0.0.97
• skype technologies skype 1.0.0.100
• skype technologies skype 1.1.0.0
• skype technologies skype 1.4.0.83
• skype technologies skype 1.5.0.79
• skype technologies skype 1.5.80
• skype technologies skype 2.0
• skype technologies skype 2.0.104
• skype technologies skype 2.0.105
• skype technologies skype 2.5
• skype technologies skype 2.5.78
• skype technologies skype 2.5.79
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://osvdb.org/39170 osvdb.org
- http://secunia.com/advisories/27934 Vendor Advisory
- http://securityreason.com/securityalert/3440 securityreason.com
- http://securitytracker.com/id?1019056 securitytracker.com
- http://www.securityfocus.com/archive/1/484703/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26748 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4110 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-070.html www.zerodayinitiative.com
- http://osvdb.org/39170 osvdb.org
- http://secunia.com/advisories/27934 Vendor Advisory
- http://securityreason.com/securityalert/3440 securityreason.com
- http://securitytracker.com/id?1019056 securitytracker.com
- http://www.securityfocus.com/archive/1/484703/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/26748 www.securityfocus.com
- http://www.vupen.com/english/advisories/2007/4110 www.vupen.com
- http://www.zerodayinitiative.com/advisories/ZDI-07-070.html www.zerodayinitiative.com