CVE-2005-3265 Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to a...
HighCVSS 9.3
EPSS 5.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skype technologies skype | = 1.1.0.61 | No fix listed |
| skype technologies skype | = 1.1.0.73 | No fix listed |
| skype technologies skype | = 1.1.0.79 | No fix listed |
| skype technologies skype | = 1.2.0.0 | No fix listed |
| skype technologies skype | = 1.2.0.37 | No fix listed |
| skype technologies skype | = 1.2.0.41 | No fix listed |
| skype technologies skype | = 1.2.0.46 | No fix listed |
| skype technologies skype | = 1.3.0.45 | No fix listed |
| skype technologies skype | = 1.3.0.48 | No fix listed |
| skype technologies skype | = 1.3.0.51 | No fix listed |
| skype technologies skype | = 1.3.0.54 | No fix listed |
| skype technologies skype | = 1.3.0.55 | No fix listed |
| skype technologies skype | = 1.3.0.57 | No fix listed |
| skype technologies skype | = 1.3.0.60 | No fix listed |
| skype technologies skype | = 1.3.0.66 | No fix listed |
| skype technologies skype | = 1.4.0.71 | No fix listed |
| skype technologies skype | = 1.4.0.78 | No fix listed |
| skype technologies skype | = 1.4.0.83 | No fix listed |
References
- 17305 third-party-advisory
- skype.com patch vendor-advisory
- VU#668193 third-party-advisory us-government-resource
- VU#930345 third-party-advisory us-government-resource
- www.pentest.co.uk patch vendor-advisory
- 15190 vdb-entry
- ADV-2005-2197 vdb-entry
- skype-uri-bo(22848) vdb-entry