CVE-2004-1114: Buffer Overflow
Published Dec 1, 2004
·Updated
Buffer overflow in the handling of command line arguments in Skype 1.0.x.94 through 1.0.x.98 allows remote attackers to execute arbitrary code via a callto:// URL with a long non-existent username, a different vulnerability than CVE-2004-1777.
Affected Software
6 affected components
Skype Technologies Skype=1.0.0.9
Skype Technologies Skype=1.0.0.10
Skype Technologies Skype=1.0.0.18
Skype Technologies Skype=1.0.0.29
Skype Technologies Skype=1.0.0.94
Skype Technologies Skype=1.0.0.97
Remediation
Patch Available
Event History
Dec 1, 2004
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1114?
CVE-2004-1114 is considered critical due to its potential to allow remote code execution.
2
How do I fix CVE-2004-1114?
To fix CVE-2004-1114, update to a non-vulnerable version of Skype later than 1.0.x.98.
3
Which versions of Skype are affected by CVE-2004-1114?
Skype versions 1.0.0.9 to 1.0.0.98 are affected by CVE-2004-1114.
4
Can CVE-2004-1114 be exploited remotely?
Yes, CVE-2004-1114 can be exploited remotely via a crafted callto:// URL.
5
What happens if CVE-2004-1114 is exploited?
If exploited, CVE-2004-1114 allows attackers to execute arbitrary code on the victim's machine.