Skype Windows/Linux Communication Handling Denial of Service Vulnerability

Bugtraq ID:	52067
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Feb 17 2012 12:00AM
Updated:	Feb 17 2012 12:00AM
Credit:	Benjamin Kunz Mejri (Rem0ve) & Alexander Fuchs (f0x23)
Vulnerable:	Skype Technologies Skype 5.6.59.10
Not Vulnerable:

Skype Windows/Linux Communication Handling Denial of Service Vulnerability

Skype is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to cause an affected application to crash, denying service to legitimate users. Due to the nature of this issue, arbitrary code-execution may be possible; this has not been confirmed.

Skype 5.6.59.10 is vulnerable; other versions may also be affected.

Skype Windows/Linux Communication Handling Denial of Service Vulnerability

The reporter of this issue has developed a working example. Please see the references for more information.

Skype Windows/Linux Communication Handling Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Skype Windows/Linux Communication Handling Denial of Service Vulnerability

References:

• Skype Homepage (Skype Technologies)
  
• Skype v5.6.59.x - Memory Corruption Vulnerability (Vulnerability Research Laboratory)