CVE-2004-1114 Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a....
HighCVSS 9.3
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skype technologies skype | = 1.0.0.9 | No fix listed |
| skype technologies skype | = 1.0.0.10 | No fix listed |
| skype technologies skype | = 1.0.0.18 | No fix listed |
| skype technologies skype | = 1.0.0.29 | No fix listed |
| skype technologies skype | = 1.0.0.94 | No fix listed |
| skype technologies skype | = 1.0.0.97 | No fix listed |
References
- 20041116 Skype callto:// BoF technical details mailing-list
- 20041116 Skype callto:// BoF technical details mailing-list
- 20041115 Re: Skype callto:// BoF technical details mailing-list
- 13191 third-party-advisory
- 11786 vdb-entry
- 11682 patch vdb-entry vendor-advisory
- www.skype.com
- www.skype.com
- skype-callto-uri-bo(18063) vdb-entry