ZDI-CAN-22552: ZDI-24-293: Microsoft Skype Protection Mechanism Failure Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of Microsoft Skype. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2024-21411.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-22552?
ZDI-CAN-22552 has a CVSS rating that indicates a high severity level due to its potential for remote code execution.
How do I fix ZDI-CAN-22552?
To fix ZDI-CAN-22552, update Microsoft Skype to the latest version as recommended by Microsoft.
What type of attack does ZDI-CAN-22552 facilitate?
ZDI-CAN-22552 facilitates remote code execution attacks that require user interaction, such as visiting a malicious page or opening an infected file.
Are all versions of Microsoft Skype affected by ZDI-CAN-22552?
Yes, ZDI-CAN-22552 affects all installed versions of Microsoft Skype that have not been updated.
Is user interaction required to exploit ZDI-CAN-22552?
Yes, user interaction is required to exploit ZDI-CAN-22552.