9.3
CVSSv2

CVE-2008-1805

Published: 06/06/2008 Updated: 08/03/2011
CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6
VMScore: 828
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Summary

Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions prior to 3.8.0.139, allows user-assisted remote malicious users to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.

Vulnerable Product Search on Vulmon Subscribe to Product

skype technologies skype 3.0.0.190

skype technologies skype 3.0.0.198

skype technologies skype 3.1.0.112

skype technologies skype 3.1.0.134

skype technologies skype 3.1.0.144

skype technologies skype 3.2.0.152

skype technologies skype 3.2.0.158

skype technologies skype 3.5.0.158

skype technologies skype 3.0.0.205

skype technologies skype 3.0.0.209

skype technologies skype 3.1.0.147

skype technologies skype 3.1.0.150

skype technologies skype 3.2.0.163

skype technologies skype 3.2.0.175

skype technologies skype 3.5.0.202

skype technologies skype 3.5.0.214

skype technologies skype 3.6.0.248

skype technologies skype 3.8.0.96

skype technologies skype 3.0.0.137

skype technologies skype 3.0.0.154

skype technologies skype 3.0.0.217

skype technologies skype 3.0.0.218

skype technologies skype 3.2.0.145

skype technologies skype 3.2.0.148

skype technologies skype 3.2.0.82

skype technologies skype 3.5.0.107

skype technologies skype 3.5.0.239

skype technologies skype 3.6.0.127

skype technologies skype 3.6.0.159

skype technologies skype 3.5.0.178

skype technologies skype 3.6.0.216

skype technologies skype 3.6.0.244

skype technologies skype 3.0.0.106

skype technologies skype 3.0.0.123

skype technologies skype 3.0.0.214

skype technologies skype 3.0.0.216

skype technologies skype 3.1.0.152

skype technologies skype 3.2.0.115

skype technologies skype 3.2.0.53

skype technologies skype 3.2.0.63

skype technologies skype 3.5.0.229

skype technologies skype 3.5.0.234

skype technologies skype