|
Skype Update Patches Security |
|
|
|
Written by Adam Gosling
|
|
Wednesday, 26 October 2005 |
The latest update from Skype is to address critical security flaws which the company divulged earlier this week.
The flaws are believed to be two of the three highlighted by security researcher Secunia.
The flaws could allow attackers to take over a Skype user's system, Skype said in an advisory published yesterday –here and here.
One flaw is easily exploited by social engineering techniques. A Skype user would need to click on a specially-crafted URL. The other would require a Skype user to import a malicious vCard.
Secunia rated the flaws as highly critical and added another to Skype’s list which affects Mac and Linux users as well. Secunia says a boundary error exists in the handling of certain unspecified Skype client network traffic.
This can be exploited to cause a heap-based buffer overflow. However, this exploit seems limited to the ability to crash the Skype client.
The Secunia advisory is here.
Related news items Newer news items
Older news items
|
