Skype Technologies Multiple Buffer Overflows

critical Nessus Network Monitor Plugin ID 3268

Synopsis

The remote host is vulnerable to a buffer overflow.

Description

The remote host is using Skype, a peer-to-peer chat and VoIP software. The remote version of this software contains multiple flaws that would allow an attacker to overflow memory buffers and either cause the service to stop or execute arbitrary code.

Solution

Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Critical

ID: 3268

Published: 10/25/2005

Updated: 3/6/2019

Dependencies: 1735, 8314

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:U/RL:OF/RC:C

CVSS v3.0

Base Score: 9.8

Temporal Score: 8.5

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

Vulnerability Information

CPE: cpe:2.3:a:skype_technologies:skype:*:*:*:*:*:*:*:*

Reference Information

CVE: CVE-2005-3267, CVE-2005-3265

BID: 15190, 15192