Skype Web Content Zone Remote Code Execution Vulnerability

Skype Web Content Zone Remote Code Execution Vulnerability

Solution:
The vendor released a temporary fix to address this issue. The fix disables the ability to add videos from DailyMotion. The vendor states that an official fix is forthcoming. Please see the references for more information.

UPDATE (January 22, 2008): The vendor has disabled the use of video in Skype until an update is available.

UPDATE (February 6, 2008): Skype has fixed these vulnerabilities in the latest version. Please see the referenced advisories for information about obtaining fixes.