CVE-2007-5989

Skype < 3.6 GOLD - Remote Code Execution via skype4com URI Handler Heap Corruption

Title source: llm
STIX 2.1

Description

Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.

References (8)

Core 8
Core References
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/4110
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://securitytracker.com/id?1019056
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27934
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3440
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/484703/100/0/threaded
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/39170
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26748
Third Party Advisory x_refsource_misc
http://www.zerodayinitiative.com/advisories/ZDI-07-070.html

Scores

EPSS 0.0442
EPSS Percentile 90.3%

Details

CWE
CWE-119
Status published
Products (18)
skype_technologies/skype 0.98.0.04
skype_technologies/skype 1.0.0.9
skype_technologies/skype 1.0.0.10
skype_technologies/skype 1.0.0.18
skype_technologies/skype 1.0.0.29
skype_technologies/skype 1.0.0.94
skype_technologies/skype 1.0.0.97
skype_technologies/skype 1.0.0.100
skype_technologies/skype 1.1.0.0
skype_technologies/skype 1.4.0.83
... and 8 more
Published Dec 13, 2007
Tracked Since Feb 18, 2026