EasyBits Extras Manager 'skype-plugin' URI Handler Arbitrary XML File Deletion Vulnerability
BID:38667
Info
EasyBits Extras Manager 'skype-plugin' URI Handler Arbitrary XML File Deletion Vulnerability
| Bugtraq ID: | 38667 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 11 2010 12:00AM |
| Updated: | Mar 11 2010 12:00AM |
| Credit: | rgod via TippingPoint's Zero Day Initiative |
| Vulnerable: |
Skype Technologies Skype (Pocket PC) 1.1 .0.6 Skype Technologies Skype (Mac OS X) 1.3 .0.16 Skype Technologies Skype (Linux) 1.2 .0.17 Skype Technologies Skype (Linux) 1.1 .0.20 Skype Technologies Skype (Linux) 2.1 beta Skype Technologies Skype (Linux) 1.0.0.7 Skype Technologies Skype (Linux) 1.0.0.1 Skype Technologies Skype (Linux) 0.93.0.3 Skype Technologies Skype (Linux) 0.92.0.12 Skype Technologies Skype 4.2 155 Skype Technologies Skype 4.2 152 Skype Technologies Skype 4.1 .179 Skype Technologies Skype 4.1 .179 Skype Technologies Skype 4.1 .166 Skype Technologies Skype 4.1 .141 Skype Technologies Skype 4.1 .136 Skype Technologies Skype 4.1 .130 Skype Technologies Skype 4.0 .227 Skype Technologies Skype 4.0 .226 Skype Technologies Skype 4.0 .224 Skype Technologies Skype 4.0 .216 Skype Technologies Skype 4.0 .215 Skype Technologies Skype 4.0 .206 Skype Technologies Skype 3.6 .244 Skype Technologies Skype 3.6 .216 Skype Technologies Skype 2.5 .79 Skype Technologies Skype 2.5 .78 Skype Technologies Skype 2.0 .105 Skype Technologies Skype 2.0 .104 Skype Technologies Skype 1.5 80 Skype Technologies Skype 1.5 .79 Skype Technologies Skype 1.4 .0.83 Skype Technologies Skype 1.1 .0.0 Skype Technologies Skype 1.0 .0.97 Skype Technologies Skype 1.0 .0.94 Skype Technologies Skype 1.0 .0.9 Skype Technologies Skype 1.0 .0.29 Skype Technologies Skype 1.0 .0.18 Skype Technologies Skype 1.0 .0.100 Skype Technologies Skype 1.0 .0.10 Skype Technologies Skype 3.8.0.139 Skype Technologies Skype 3.8.0.115 Skype Technologies Skype 3.6 Skype Technologies Skype 3.5 Skype Technologies Skype 2.5 Skype Technologies Skype 2.0 Skype Technologies Skype 0.98.0.04 Skype Technologies Skype EasyBits Software Extras Manager 2.0.0.67 |
| Not Vulnerable: | |
Discussion
EasyBits Extras Manager 'skype-plugin' URI Handler Arbitrary XML File Deletion Vulnerability
EasyBits Extras Manager is prone to a vulnerability that lets attackers delete arbitrary XML files on the affected computer.
Successful attacks can result in denial-of-service conditions.
EasyBits Extras Manager is prone to a vulnerability that lets attackers delete arbitrary XML files on the affected computer.
Successful attacks can result in denial-of-service conditions.
Exploit / POC
EasyBits Extras Manager 'skype-plugin' URI Handler Arbitrary XML File Deletion Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
EasyBits Extras Manager 'skype-plugin' URI Handler Arbitrary XML File Deletion Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
EasyBits Extras Manager 'skype-plugin' URI Handler Arbitrary XML File Deletion Vulnerability
References:
References:
- EasyBits Software Homepage (EasyBits Software)
- Skype Homepage (Skype Technologies)
- Skype URI Processing Arbitrary XML File Deletion Vulnerability (Zero Day Initiative)