Skype Technologies Multiple Buffer Overflows

critical Nessus Network Monitor Plugin ID 3268

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is using Skype, a peer-to-peer chat and VoIP software. The remote version of this software contains multiple flaws that would allow an attacker to overflow memory buffers and either cause the service to stop or execute arbitrary code.

Solution

Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Critical

ID: 3268

Family: Internet Messengers

Published: 10/25/2005

Updated: 3/6/2019

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS v3

Risk Factor: Critical

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:/a:skype_technologies:skype

Reference Information

CVE: CVE-2005-3265, CVE-2005-3267

BID: 15190, 15192

Detections

Analytics