Skype Technologies Skype Voicemail URI Handler Remote Denial of Service Vulnerability

Bugtraq ID:	26588
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 26 2007 12:00AM
Updated:	Dec 18 2007 08:05PM
Credit:	Critical Security is credited for the discovery of this issue.
Vulnerable:	Skype Technologies Skype 3.6 .216
Not Vulnerable:

Skype Technologies Skype Voicemail URI Handler Remote Denial of Service Vulnerability

Skype is prone to a remote denial-of-service vulnerability because of a NULL-pointer dereference flaw.

Successfully exploiting this issue allows remote attackers to crash the application, denying service to legitimate users.

Skype 3.6.0.216 for Microsoft Windows is vulnerable to this issue; other versions may also be affected.

Skype Technologies Skype Voicemail URI Handler Remote Denial of Service Vulnerability

The following URI is sufficient to trigger this issue:

skype:?voicemail

Skype Technologies Skype Voicemail URI Handler Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Skype Technologies Skype Voicemail URI Handler Remote Denial of Service Vulnerability

References:

• Skype Homepage (Skype Technologies)
  
• Skype DoS ([email protected])