Skype bug may expose users to malicious code

siljaline · Aug 22, 2011

The latest version of Skype for Windows contains a security vulnerability that allows attackers to inject potentially dangerous code into a user's phone session, a German security researcher has reported.

The XSS, or cross-site scripting, vulnerability in Skype 5.5.0.113 is the result of the voice-over-IP client failing to inspect user-supplied phone numbers for malicious code, researcher Levent Kayan said. As a result, attackers might be able to exploit the bug to inject commands or scripts that hijack the machine running the program.
Click to expand...

Advisory of the vulnerablity in the last version of Skype. Full article

Log in or Sign up

Skype bug may expose users to malicious code

siljaline Registered Member

Log in or Sign up

Skype bug may expose users to malicious code

siljaline Registered Member

Useful Searches