NetSight
IP …
critical9.3

CVE-2008-2545

Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remot…

Impact

Skype 3.6.0.248, and other versions before 3.8.0.139, uses a case-sensitive comparison when checking for dangerous extensions, which allows user-assisted remote attackers to bypass warning dialogs and possibly execute arbitrary code via a file: URI with a dangerous extension that uses a different case.

Affected products

VendorProductAffected versions
Skype TechnologiesSkype
through 3.8.0.115
Versions 3.0.0.106, 3.0.0.123, 3.0.0.137, 3.0.0.154, 3.0.0.190

Weakness classification

CWE-20

References