CVE-2008-1805: Input Validation
Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1805?
CVE-2008-1805 is classified as a medium severity vulnerability.
How do I fix CVE-2008-1805?
To fix CVE-2008-1805, users should upgrade to Skype version 3.8.0.139 or later.
What causes CVE-2008-1805?
CVE-2008-1805 is caused by an incomplete blacklist vulnerability that allows file: URIs with certain executable extensions to bypass warning dialogs.
Which versions of Skype are affected by CVE-2008-1805?
CVE-2008-1805 affects Skype versions prior to 3.8.0.139, including 3.6.0.248.
Is CVE-2008-1805 a user-assisted vulnerability?
Yes, CVE-2008-1805 is a user-assisted vulnerability, requiring user interaction to potentially exploit.