CVE-2005-3267 Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) v...
HighCVSS 10.0
EPSS 7.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in Skype client before 1.4.x.84 on Windows, before 1.3.x.17 on Mac OS, before 1.2.x.18 on Linux, and 1.1.x.6 and earlier allows remote attackers to cause a denial of service (crash) via crafted network data with a large Object Counter value, which leads to a resultant heap-based buffer overflow.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| skype technologies skype | = 0.92.0.12 | No fix listed |
| skype technologies skype | = 0.93.0.3 | No fix listed |
| skype technologies skype | = 0.98.0.04 | No fix listed |
| skype technologies skype | = 1.0.0.1 | No fix listed |
| skype technologies skype | = 1.0.0.7 | No fix listed |
| skype technologies skype | = 1.0.0.9 | No fix listed |
| skype technologies skype | = 1.0.0.10 | No fix listed |
| skype technologies skype | = 1.0.0.18 | No fix listed |
| skype technologies skype | = 1.0.0.29 | No fix listed |
| skype technologies skype | = 1.0.0.94 | No fix listed |
| skype technologies skype | = 1.0.0.97 | No fix listed |
| skype technologies skype | = 1.0.0.100 | No fix listed |
| skype technologies skype | = 1.1.0.0 | No fix listed |
| skype technologies skype | = 1.1.0.20 | No fix listed |
| skype technologies skype | = 1.1.06 | No fix listed |
| skype technologies skype | = 1.2.0.17 | No fix listed |
| skype technologies skype | = 1.3.0.16 | No fix listed |
| skype technologies skype | = 1.4.0.83 | No fix listed |
References
- 20051025 Skype security advisory mailing-list
- 17305 patch third-party-advisory vendor-advisory
- 115 third-party-advisory
- skype.com patch vendor-advisory
- VU#905177 third-party-advisory us-government-resource
- 20306 vdb-entry
- 15192 exploit patch vdb-entry
- ADV-2005-2197 vdb-entry vendor-advisory
- skype-client-udp-bo(22850) vdb-entry