ZDI-24-293: Microsoft Skype Protection Mechanism Failure Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-21411.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-24-293?
ZDI-24-293 has a CVSS rating indicating a high severity vulnerability that could lead to remote code execution if exploited.
How do I fix ZDI-24-293?
To fix ZDI-24-293, users should update their Microsoft Skype to the latest version that addresses this vulnerability.
Who is affected by ZDI-24-293?
ZDI-24-293 affects installations of Microsoft Skype, specifically those that are not updated against this vulnerability.
What type of attack does ZDI-24-293 enable?
ZDI-24-293 allows remote attackers to execute arbitrary code on affected systems with user interaction required for exploitation.
Is user interaction required for ZDI-24-293 exploitation?
Yes, exploiting ZDI-24-293 requires user interaction, such as visiting a malicious webpage or opening a malicious file.