Skype Toolbars Extension for Firefox BETA Clipboard Security Weakness

Bugtraq ID:	31613
Class:	Design Error
CVE:	CVE-2008-5697
Remote:	Yes
Local:	No
Published:	Oct 07 2008 12:00AM
Updated:	May 07 2015 05:22PM
Credit:	irk4z[at]yahoo.pl
Vulnerable:	Skype Technologies Skype Toolbars Extension for Firefox BETA 2.2 .95
Not Vulnerable:

Skype Toolbars Extension for Firefox BETA Clipboard Security Weakness

Skype Toolbars Extension for Firefox is prone to a security weakness that allows attackers to inject arbitrary content onto a user's clipboard.

Attackers can exploit this issue to write content to a victim's clipboard. As a result, attacker-supplied URIs can persist in the victim's clipboard.

Skype Toolbars Extension for Firefox BETA 2.2.0.95 is vulnerable; other versions of the extension may also be affected.

Skype Toolbars Extension for Firefox BETA Clipboard Security Weakness

To exploit this issue, an attacker must entice an unsuspecting user into visiting a malicious webpage.

The following example code is available:

• /data/vulnerabilities/exploits/31613.html

Skype Toolbars Extension for Firefox BETA Clipboard Security Weakness

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Skype Toolbars Extension for Firefox BETA Clipboard Security Weakness

References:

• Skype Homepage (Skype Technologies)
  
• Skype Toolbars Homepage (Skype Technologies)