NetSight
IP …
critical9.3

CVE-2008-1805

Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and…

Impact

Incomplete blacklist vulnerability in Skype 3.6.0.248, and other versions before 3.8.0.139, allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI that ends in an executable extension that is not covered by the blacklist.

Affected products

VendorProductAffected versions
Skype TechnologiesSkype
through 3.8.0.115
Versions 3.0.0.106, 3.0.0.123, 3.0.0.137, 3.0.0.154, 3.0.0.190

Weakness classification

CWE-20

References