CVE-2007-5989: Buffer Overflow
Published Dec 13, 2007
·Updated
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
Affected Software
18 affected components
Skype Technologies Skype=0.98.0.04
Skype Technologies Skype=1.0.0.9
Skype Technologies Skype=1.0.0.10
Skype Technologies Skype=1.0.0.18
Skype Technologies Skype=1.0.0.29
Skype Technologies Skype=1.0.0.94
Skype Technologies Skype=1.0.0.97
Skype Technologies Skype=1.0.0.100
Skype Technologies Skype=1.1.0.0
Skype Technologies Skype=1.4.0.83
Skype Technologies Skype=1.5.0.79
Skype Technologies Skype=1.5.80
Skype Technologies Skype=2.0
Skype Technologies Skype=2.0.104
Skype Technologies Skype=2.0.105
Skype Technologies Skype=2.5
Skype Technologies Skype=2.5.78
Skype Technologies Skype=2.5.79
Event History
Dec 13, 2007
CVE Published
via MITRE·09:00 PM
Data Sourced
via MITRE·09:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2007-5989?
CVE-2007-5989 is classified as a critical vulnerability due to its potential to enable remote code execution.
2
How do I fix CVE-2007-5989?
To mitigate CVE-2007-5989, upgrade to a version of Skype that is 3.6 GOLD or later.
3
What types of attacks can exploit CVE-2007-5989?
CVE-2007-5989 can be exploited through specially crafted Skype URI commands that trigger heap corruption.
4
Which versions of Skype are affected by CVE-2007-5989?
Skype versions prior to 3.6 GOLD, including 0.98.0.04 up to 2.5.79, are affected by CVE-2007-5989.
5
Is there any protection against CVE-2007-5989?
Users should update their Skype applications and maintain up-to-date software to protect against CVE-2007-5989.