Skype Web Content Zone Remote Code Execution Vulnerability

Skype Web Content Zone Remote Code Execution Vulnerability

References:

No more videos for you. Come back when patch available! (Aviv Raff)
Skype for Windows Download Page (Skype Technologies)
Skype Homepage (Skype Technologies)
SKYPE-SB/2008-002: Skypefind Cross Zone Scripting Vulnerability (Skype)
UPDATE 1 SKYPE-SB/2008-001: Skype Cross Zone Scripting Vulnerability (Skype)
UPDATE 2 SKYPE-SB/2008-001: Skype Cross Zone Scripting Vulnerability (Skype)
Attackers can SkypeFind you ("avivra" )
Skype cross-zone scripting vulnerability (Aviv Raff On.NET)
SKYPE-SB/2008-001: Skype Cross Zone Scripting Vulnerability (Skype)
VU#248184 Skype does not properly filter input from external websites (US-CERT)
Vulnerability Note VU#794236 SkypeFind fails to properly sanitize user-supplied (US-CERT)

Privacy Statement
Copyright 2010, SecurityFocus