Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.

A Secunia Advisory reports :

Some vulnerabilities have been reported in Skype, which can be exploited by malicious people to cause a DoS or to compromise a user's system.

The remote host is running Skype, a peer-to-peer voice over IP software. 

The remote version of this software is vulnerable to a heap overflow in the handling of its data structures.  An attacker can exploit this flaw by sending a specially crafted network packet to UDP or TCP ports Skype is listening on. A successful exploitation of this flaw will result in code execution on the remote host. 

In addition, Skype has been reported to contain overflows in the handling of VCards and callto/skype URLs. However, Nessus has not checked for them.

The remote host is running Skype, a peer-to-peer, voice-over-IP software.

The remote version of this software is vulnerable to a heap overflow in the handling of its data structures. An attacker can exploit this flaw by sending a specially crafted network packet to UDP or TCP ports Skype is listening on.

Successful exploitation of this issue may result in a crash of the Skype user client or code execution on the remote host.

The remote host is using Skype, a peer-to-peer chat and VoIP software. The remote version of this software contains multiple flaws that would allow an attacker to overflow memory buffers and either cause the service to stop or execute arbitrary code.

ID	Name	Product	Family	Severity
21451	FreeBSD : skype -- multiple buffer overflow vulnerabilities (70fc13d9-4ab4-11da-932d-00055d790c25)	Nessus	FreeBSD Local Security Checks	critical
21209	Skype < 1.4.0.84 Multiple Vulnerabilities (uncredentialed check)	Nessus	Windows	critical
20090	Skype < 1.4.0.84 Multiple Remote Overflows (credentialed check)	Nessus	Windows	critical
3268	Skype Technologies Multiple Buffer Overflows	Nessus Network Monitor	Internet Messengers	critical

Detections

Analytics

CVE-2005-3265

critical

Tenable Plugins

critical

critical

critical

critical