Description
Argument injection vulnerability in the URI handler in Skype 2.0.*.104 and 2.5.*.0 through 2.5.*.78 for Windows allows remote authorized attackers to download arbitrary files via a URL that contains certain command-line switches.
References
- 20060521 Skype - URI Handler Command Switch Parsing mailing-list
- 18038 vdb-entry
- VU#466428 third-party-advisory
- ADV-2006-1871 vdb-entry
- skype-uri-handler-file-access(26557) vdb-entry
- 20060521 Skype - URI Handler Command Switch Parsing mailing-list
- 25658 vdb-entry
- 20154 third-party-advisory
- http://www.skype.com/security/skype-sb-2006-001.html