Description
Buffer overflow in Skype for Windows 1.1.x.0 through 1.4.x.83 allows remote attackers to execute arbitrary code via (1) callto:// and (2) skype:// links, or (3) a non-standard VCARD, possibly due to an underlying error in the SysUtils.WideFmtStr Delphi routine.
References
- http://www.pentest.co.uk/documents/ptl-2005-01.html
- VU#668193 third-party-advisory
- 17305 third-party-advisory
- ADV-2005-2197 vdb-entry
- VU#930345 third-party-advisory
- skype-uri-bo(22848) vdb-entry
- 15190 vdb-entry
- http://skype.com/security/skype-sb-2005-02.html