Skype Technologies Multiple Buffer Overflows

Critical Nessus Network Monitor Plugin ID 3268

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is using Skype, a peer-to-peer chat and VoIP software. The remote version of this software contains multiple flaws that would allow an attacker to overflow memory buffers and either cause the service to stop or execute arbitrary code.

Solution

Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Critical

ID: 3268

File Name: 3268.prm

Published: 2005/10/25

Modified: 2016/01/19

Dependencies: 1735, 8314

Risk Information

Risk Factor: Critical

CVSSv2

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSSv3

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS3#AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS3#E:U/RL:O/RC:C

Reference Information

CVE: CVE-2005-3267, CVE-2005-3265

BID: 15190, 15192