CVE-2008-2545: Input Validation
Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2545?
CVE-2008-2545 is considered a moderate risk vulnerability as it allows remote attackers to potentially execute arbitrary code.
How do I fix CVE-2008-2545?
To fix CVE-2008-2545, update your Skype software to version 3.8.0.139 or later.
Who is impacted by CVE-2008-2545?
Users of Skype versions prior to 3.8.0.139, including versions like 3.6.0.248, are impacted by CVE-2008-2545.
What type of vulnerability is CVE-2008-2545?
CVE-2008-2545 is a security vulnerability that involves a flaw in case-sensitive file extension checking.
Can CVE-2008-2545 be exploited through social engineering?
Yes, CVE-2008-2545 can be exploited through social engineering techniques as it requires user assistance to execute harmful files.