CVE-2005-3265: Buffer Overflow
Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2005-3265?
CVE-2005-3265 has a high severity level due to the potential for remote code execution.
How do I fix CVE-2005-3265?
To fix CVE-2005-3265, users should upgrade to a patched version of Skype that is not affected by this vulnerability.
Which versions of Skype are affected by CVE-2005-3265?
CVE-2005-3265 affects multiple Skype versions including 1.1.x, 1.2.x, 1.3.x, and 1.4.x up to 1.4.0.83.
What type of attack does CVE-2005-3265 facilitate?
CVE-2005-3265 facilitates remote code execution attacks via specially crafted links.
Can CVE-2005-3265 be exploited without user interaction?
Yes, CVE-2005-3265 can be exploited by convincing a user to click on a malicious link, allowing remote attackers to execute code.