Detections
Analytics
Skype for Windows < 6.3.0.105 Multiple Vulnerabilities (uncredentialed check)
critical Nessus Plugin ID 66694
Language:
Synopsis
The remote Skype install is potentially affected by multiple vulnerabilities.Description
According to its timestamp, the version of Skype installed on the remote Windows host is potentially affected by the following vulnerabilities :- An error exists related to the Click to Call Service (c2c_service.exe) that could allow a local attacker to cause arbitrary DLL files to be loaded, thus allowing code execution.
- Several other unspecified errors exist.
Solution
Upgrade to Skype for Windows 6.3.0.105 or later.See Also
Plugin Details
Severity: Critical
ID: 66694
File Name: skype_6_3_0_105.nasl
Version: 1.7
Type: remote
Family: Misc.
Published: 5/30/2013
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:skype:skype
Required KB Items: Services/skype
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 3/14/2013
Vulnerability Publication Date: 3/14/2013