CVE-2004-1777: Input Validation
Published Dec 31, 2004
·Updated
A "range check error" in Skype for Windows before 0.98.0.28 allows local and remote attackers to cause a denial of service (application crash) via long command line arguments or a long callto:// URL, a different vulnerability than CVE-2004-1114.
Affected Software
2 affected components
Skype Technologies Skype=0.98.0.04
Skype Technologies Skype<=0.98.0.27
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 3, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1777?
CVE-2004-1777 has a moderate severity level as it allows for denial of service through application crashes.
2
How do I fix CVE-2004-1777?
To fix CVE-2004-1777, users should upgrade to Skype version 0.98.0.28 or later.
3
What does CVE-2004-1777 affect?
CVE-2004-1777 affects Skype for Windows versions 0.98.0.04 up to and including 0.98.0.27.
4
What type of attacks are possible with CVE-2004-1777?
CVE-2004-1777 allows attackers to execute denial of service attacks by utilizing long command line arguments or extensive callto:// URLs.
5
Is CVE-2004-1777 a remote vulnerability?
Yes, CVE-2004-1777 can be exploited by both local and remote attackers.