Description
Unspecified vulnerability in the skype4com URI handler in Skype before 3.6 GOLD allows remote attackers to execute arbitrary code via "short string values" that result in heap corruption.
References
- ADV-2007-4110 vdb-entry
- 1019056 vdb-entry
- 27934 third-party-advisory
- 3440 third-party-advisory
- 20071206 ZDI-07-070: Skype skype4com URI Handler Remote Heap Corruption Vulnerability mailing-list
- 39170 vdb-entry
- 26748 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-070.html