Skype 3.6.0.248, and other versions prior to 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote malicious users to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
skype technologies skype 3.0.0.123 |
||
skype technologies skype 3.0.0.137 |
||
skype technologies skype 3.0.0.217 |
||
skype technologies skype 3.0.0.218 |
||
skype technologies skype 3.2.0.115 |
||
skype technologies skype 3.2.0.145 |
||
skype technologies skype 3.2.0.63 |
||
skype technologies skype 3.2.0.82 |
||
skype technologies skype 3.5.0.239 |
||
skype technologies skype 3.6.0.127 |
||
skype technologies skype 3.0.0.198 |
||
skype technologies skype 3.0.0.205 |
||
skype technologies skype 3.1.0.144 |
||
skype technologies skype 3.1.0.147 |
||
skype technologies skype 3.2.0.158 |
||
skype technologies skype 3.2.0.163 |
||
skype technologies skype 3.5.0.178 |
||
skype technologies skype 3.5.0.202 |
||
skype technologies skype 3.5.0.214 |
||
skype technologies skype 3.6.0.244 |
||
skype technologies skype 3.6.0.248 |
||
skype technologies skype 3.0.0.154 |
||
skype technologies skype 3.0.0.190 |
||
skype technologies skype 3.1.0.112 |
||
skype technologies skype 3.1.0.134 |
||
skype technologies skype 3.2.0.148 |
||
skype technologies skype 3.2.0.152 |
||
skype technologies skype 3.5.0.107 |
||
skype technologies skype 3.5.0.158 |
||
skype technologies skype 3.6.0.159 |
||
skype technologies skype 3.6.0.216 |
||
skype technologies skype 3.0.0.106 |
||
skype technologies skype 3.0.0.209 |
||
skype technologies skype 3.0.0.214 |
||
skype technologies skype 3.0.0.216 |
||
skype technologies skype 3.1.0.150 |
||
skype technologies skype 3.1.0.152 |
||
skype technologies skype 3.2.0.175 |
||
skype technologies skype 3.2.0.53 |
||
skype technologies skype 3.5.0.229 |
||
skype technologies skype 3.5.0.234 |
||
skype technologies skype 3.8.0.96 |
||
skype technologies skype |
Vulmon