CVE-2008-2545

Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.

• skype technologies skype (<= 3.8.0.115) • skype technologies skype 3.0.0.106 • skype technologies skype 3.0.0.123 • skype technologies skype 3.0.0.137 • skype technologies skype 3.0.0.154 • skype technologies skype 3.0.0.190 • skype technologies skype 3.0.0.198 • skype technologies skype 3.0.0.205 • skype technologies skype 3.0.0.209 • skype technologies skype 3.0.0.214 • skype technologies skype 3.0.0.216 • skype technologies skype 3.0.0.217 • skype technologies skype 3.0.0.218 • skype technologies skype 3.1.0.112 • skype technologies skype 3.1.0.134 • skype technologies skype 3.1.0.144 • skype technologies skype 3.1.0.147 • skype technologies skype 3.1.0.150 • skype technologies skype 3.1.0.152 • skype technologies skype 3.2.0.53 • skype technologies skype 3.2.0.63 • skype technologies skype 3.2.0.82 • skype technologies skype 3.2.0.115 • skype technologies skype 3.2.0.145 • skype technologies skype 3.2.0.148 • skype technologies skype 3.2.0.152 • skype technologies skype 3.2.0.158 • skype technologies skype 3.2.0.163 • skype technologies skype 3.2.0.175 • skype technologies skype 3.5.0.107 • skype technologies skype 3.5.0.158 • skype technologies skype 3.5.0.178 • skype technologies skype 3.5.0.202 • skype technologies skype 3.5.0.214 • skype technologies skype 3.5.0.229 • skype technologies skype 3.5.0.234 • skype technologies skype 3.5.0.239 • skype technologies skype 3.6.0.127 • skype technologies skype 3.6.0.159 • skype technologies skype 3.6.0.216 • skype technologies skype 3.6.0.244 • skype technologies skype 3.6.0.248 • skype technologies skype 3.8.0.96