Vulnerability in Skype

Entertainment news and updates blog article

30th January 2008

Various researchers now all talking about the vulnerability in the popular program Skype, which may lead to appearing of malicious applications in the system when using the feature of Add video to chat. This feature of Skype uses the Internet Explorer component for visualization HTML, and it runs it with the lowest level of security.
Potentially, it gives attackers an opportunity to perform reading/recording files on the hard drive and run executable files. Aviv Raff, one of the researchers who reported the error, showed how it could be used in action. He has deposited a video, which showed how, by means of this error, you can run the standard "calculator".
The error was found in the most recent version of Skype, 3.6.0.244, although it is possible that the previous ones may be at risk as well. Therefore, the researchers recommend not to use the feature of searching videofiles in Skype until the patch is released.