Skype buffer overflow vulnerability

[Candace Holman <>]

In case you're using Skype and haven't seen the advisory...

Skype callto: URL Buffer Overflow
Affected:
Skype versions prior to 1.0.0.94 through 1.0.0.98 for Windows

Status: Vendor has confirmed, upgrade to version 1.0.0.100 or above. The
version also fixes another vulnerability in handling the "quick-call"
field.

Reference:
Posting by Febian Becker
http://www.securityfocus.com/archive/1/381381/2004-11-15/2004-11-21/0
Skype Advisory
http://www.skype.com/security/ssa-2004-02.html
Skype Homepage
http://www.skype.com/products/explained.html
SecurityFocus BID
http://www.securityfocus.com/bid/11682
http://www.securityfocus.com/bid/11692


=====================================================================
Candace Holman

Harvard University Information Systems
60 Oxford Street
Cambridge, MA 02138